依我个人的经验,破解crackme对破解能力的提高很有帮助,11,12,14课将重点介绍
下面给出的地址可能已下载不到,请去破解乐园的练习专页下载 zop.yeah.net 记清编号即可
重点体会用w32dasm辅助追注册码
Dope2112.1破解教程(编号:44)
http://go3.163.com/gfcrack/crackme/Dope2112.1.zip
破解:风飘雪
难度:★(适合初学者)
w32dasm反汇编,串式参考"Leider nicht versuchs noch mal!"
:00421D35 8B55E8 mov edx, dword ptr [ebp-18] ***
:00421D38 8B45F4 mov eax, dword ptr [ebp-0C] ***
:00421D3B E83417FEFF call 00403474 ***
:00421D40 7512 jne 00421D54 ***
^^^^^^^^^^^^
:00421D42 8B86C0010000 mov eax, dword ptr [esi+000001C0]
* Possible StringData Ref from Code Obj ->"Hey du hast es geschaft !" -<Good boy>
|
:00421D48 BAE41D4200 mov edx, 00421DE4
:00421D4D E8D6FAFEFF call 00411828
:00421D52 EB10 jmp 00421D64
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421D40(C)
|
:00421D54 8B86C0010000 mov eax, dword ptr [esi+000001C0]
^^^^^^^^
* Possible StringData Ref from Code Obj ->"Leider nicht versuchs noch mal " -<Bad boy>
->"!"^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
:00421D5A BA081E4200 mov edx, 00421E08
运行trw2000,输入姓名: guodong 注册码: 7654321 (姓名必须不小于6个字符)
ctrl-n激活trw
bpx 421d3b
g
点确定，被拦，出现trw界面
d eax
eax=108-133490
总结: 姓名: guodong 注册码: 108-133490
--------------------------------(2)-----------------------------
ekH.1破解教程(编号:54)
http://go3.163.com/gfcrack/crackme/eKH.1.zip
破解:风飘雪
难度:★(适合初学者)
w32dasm反汇编,串式参考"Wrong Serial Number !"
:00427B95 8B45F8 mov eax, dword ptr [ebp-08]
:00427B98 5A pop edx
:00427B99 E882FEFFFF call 00427A20 ***▲
:00427B9E 3D4E61BC00 cmp eax, 00BC614E ***
:00427BA3 7D1E jge 00427BC3 *** =>此处跳走即成功
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B73(C)
|
:00427BA5 6A00 push 00000000
* Possible StringData Ref from Code Obj ->"ERROR"
|
:00427BA7 68087C4200 push 00427C08
* Possible StringData Ref from Code Obj ->"Wrong Serial Number !"
| ^^^^^^^^^^^^^^^^^^^^
:00427BAC 68107C4200 push 00427C10
trw2000,输入name : guodong serial: 7654321
bpx 427b95 按F10到▲行
d edx
内存窗口如下:
0030:00B92238 37 36 35 34 33 32 31 00-54 94 42 00 54 41 B9 00 7654321.T擝.TA?.
0030:00B92248 7C 10 00 00 36 00 00 00-50 22 B9 00 50 22 B9 00 |...6...P"?.P"?.
0030:00B92258 10 00 00 00 20 00 00 00-1B 00 00 00 00 00 00 00 .... ...........
0030:00B92268 09 00 00 00 41 36 4C 36-4E 36 41 34 36 00 42 00 ....A6L6N6A46.B.
总结 guodong A6L6N6A46
作业
找出可视化屏保制作 (True Screen Saver Builder)1.1 的注册码,写出破解教程寄给我(要求:先用W32DASM反汇编,找到关键CALL,再用TRW追注册码) 下载 www.csdn.net或www.shareware.net.cn去搜
|
安全中国首页 > 文章中心 > 逆向工程技术