km159
发表于 2009-1-31 23:59:13
骗骗新手还行,对你们来说就是秒破的
哎呀呀
零下八度
发表于 2009-2-5 16:17:11
高手!!我就只有看看的分了!!!呵呵!!给你顶顶!!!
夜冷风
发表于 2009-2-22 12:22:43
为什么X88师傅有几个图.我注册成功了把窗口一点确定就退出了!!!!/:L /:L
感冒了头晕.不看算了.全都是暴破!!!/:002 /:002
强烈要求LZ公布源码学习!!
楼下大牛分析算法!!!/:013
------------------------------------------------------------------------------------
去第一处
00425AB8 55 push ebp //断首
00425AB9 8BEC mov ebp, esp
00425ABB 81EC 10000000 sub esp, 10
00425AC1 C745 FC 00000000mov dword ptr , 0
00425AC8 C745 F8 00000000mov dword ptr , 0
00425ACF 68 01030080 push 80000301
00425AD4 6A 00 push 0
00425AD6 68 01000000 push 1
省略代码---------------------------------------------------
00425C0A /0F84 05000000 je 00425C15 //不跳
00425C10 |E9 33000000 jmp 00425C48
00425C15 \68 02000080 push 80000002
00425C1A 6A 00 push 0
00425C1C 68 01000000 push 1
00425C21 6A 00 push 0
00425C23 6A 00 push 0
00425C25 6A 00 push 0
00425C27 68 01000100 push 10001
00425C2C 68 06000106 push 6010006
00425C31 68 07000152 push 52010007
00425C36 68 03000000 push 3
00425C3B BB 20030000 mov ebx, 320
00425C40 E8 520C0000 call 00426897 //错误NAG
00425C45 83C4 28 add esp, 28
00425C48 8B5D FC mov ebx, dword ptr
00425C4B 85DB test ebx, ebx
第2处效验..
00425CDE 55 push ebp //断首
00425CDF 8BEC mov ebp,esp
00425CE1 81EC 0C000000 sub esp,0C
00425CE7 C745 FC 0000000>mov dword ptr ss:,0
00425CEE 68 00000000 push 0
00425CF3 BB 08010000 mov ebx,108
00425CF8 E8 9A0B0000 call crackme.00426897
00425CFD 83C4 04 add esp,4
00425D00 8945 F8 mov dword ptr ss:,eax
00425D03 8B45 F8 mov eax,dword ptr ss:
00425D06 50 push eax
00425D07 8B5D FC mov ebx,dword ptr ss:
00425D0A 85DB test ebx,ebx
00425D0C 74 09 je short crackme.00425D17
00425D0E 53 push ebx
00425D0F E8 890B0000 call crackme.0042689D
00425D14 83C4 04 add esp,4
00425D17 58 pop eax
00425D18 8945 FC mov dword ptr ss:,eax
00425D1B 6A FF push -1
00425D1D 6A 08 push 8
00425D1F 68 3C000116 push 1601003C
00425D24 68 05000152 push 52010005
00425D29 E8 750B0000 call crackme.004268A3
.................................................................
00425D65 /0F84 05000000 je crackme.00425D70 //不跳
00425D6B |E9 3D000000 jmp crackme.00425DAD
00425D70 \68 02000080 push 80000002
00425D75 6A 00 push 0
00425D77 68 01000000 push 1
00425D7C 6A 00 push 0
00425D7E 6A 00 push 0
00425D80 6A 00 push 0
00425D82 68 01000100 push 10001
00425D87 68 06000106 push 6010006
00425D8C 68 07000152 push 52010007
00425D91 68 03000000 push 3
00425D96 BB 20030000 mov ebx,320
00425D9B E8 F70A0000 call crackme.00426897 ; //??
00425DA0 83C4 28 add esp,28
00425DA3 6A 00 push 0
00425DA5 E8 D50A0000 call crackme.0042687F
00425DAA 83C4 04 add esp,4
然后就可以正确登陆了
00425F10 55 push ebp //断首
00425F11 8BEC mov ebp,esp
00425F13 81EC 40000000 sub esp,40
00425F19 C745 F8 0000000>mov dword ptr ss:,0
00425F20 C745 FC 0000000>mov dword ptr ss:,0
00425F27 C745 F4 0000000>mov dword ptr ss:,0
00425F2E C745 F0 0000000>mov dword ptr ss:,0
00425F35 C745 E8 0000000>mov dword ptr ss:,0
00425F3C C745 EC 0000000>mov dword ptr ss:,0
00425F43 C745 F8 9B7621C>mov dword ptr ss:,CC21769B
00425F4A C745 FC 9E01000>mov dword ptr ss:,19E
00425F51 6A FF push -1
00425F53 6A 08 push 8
........算法等待大牛们分析.......................................
004262F5 /0F84 38000000 je skyvn.00426333 //不跳就注册成功
004262FB |68 02000080 push 80000002
00426300 |6A 00 push 0
00426302 |68 01000000 push 1
00426307 |6A 00 push 0
00426309 |6A 00 push 0
0042630B |6A 00 push 0
0042630D |68 01000100 push 10001
00426312 |68 12000106 push 6010012
00426317 |68 13000152 push 52010013
0042631C |68 03000000 push 3
00426321 |BB 20030000 mov ebx,320
00426326 |E8 6C050000 call skyvn.00426897
0042632B |83C4 28 add esp,28
0042632E |E9 00000000 jmp skyvn.00426333
00426333 \6A FF push -1
00426335 6A 08 push 8
00426337 68 4A000116 push 1601004A
0042633C 68 09000152 push 52010009
00426341 E8 5D050000 call skyvn.004268A3
00426346 83C4 10 add esp,10
00426349 8945 E4 mov dword ptr ss:,eax
0042634C 6A FF push -1
0042634E 6A 08 push 8
00426350 68 54000116 push 16010054
00426355 68 09000152 push 52010009
0042635A E8 44050000 call skyvn.004268A3
0042635F 83C4 10 add esp,10
00426362 8945 E0 mov dword ptr ss:,eax
00426365 6A FF push -1
00426367 6A 08 push 8
00426369 68 BA000116 push 160100BA
0042636E 68 09000152 push 52010009
00426373 E8 2B050000 call skyvn.004268A3
00426378 83C4 10 add esp,10
[ 本帖最后由 夜冷风 于 2009-2-22 12:25 编辑 ]
冷血书生
发表于 2009-2-22 12:47:37
等完整分析!!!!!!!!!!!!!!!!!
dewar
发表于 2009-2-22 20:16:05
占位学习,等待分析
km159
发表于 2009-2-22 21:02:33
原帖由 夜冷风 于 2009-2-22 12:22 发表 https://www.chinapyg.com/images/common/back.gif
为什么X88师傅有几个图.我注册成功了把窗口一点确定就退出了!!!!/:L /:L
感冒了头晕.不看算了.全都是暴破!!!/:002 /:002
强烈要求LZ公布源码学习!!
41482
楼下大牛分析算法!!!/:013
--------------------- ...
我的04版CM很快就要出来了,我在隐藏注册码方面总是没你厉害,我真不知道怎么样才能让OD显示不出明码,难道一定要重启验证?哎所以我的04版cm重点不在注册码正确与否,而在于“恭喜,你是爆破的”这个主题,我已经写好了,由于没有U盘而放在单位,再次感叹下OD的强大~哎,所以我的第四版cm在OD里注册成功不能算数,一定要在windows下成功才算数哈~最后还要感慨od的强大~~哎,因为有OD所以我的第四版cm出现了个不能修复的bug
冰糖
发表于 2009-2-22 21:56:31
LS 的头像不错啊,最近在看,呵呵/:017
想不出现明码用中间变量比较就可以了
夜冷风
发表于 2009-2-23 08:41:59
冰糖的头像越来越性感了!!/:018 /:018 /:018
孤漂江湖狼
发表于 2009-2-23 19:19:20
原帖由 夜冷风 于 2009-2-22 12:22 发表 https://www.chinapyg.com/images/common/back.gif
为什么X88师傅有几个图.我注册成功了把窗口一点确定就退出了!!!!/:L /:L
感冒了头晕.不看算了.全都是暴破!!!/:002 /:002
强烈要求LZ公布源码学习!!
41482
楼下大牛分析算法!!!/:013
--------------------- ...
不知道冷风兄是下的什么断点,我怎麽没找到断点可以去除校验啊
km159
发表于 2009-2-23 19:25:37
啦啦啦
[ 本帖最后由 km159 于 2009-2-23 19:54 编辑 ]