-
-
[原创]dREAMtHEATER's CrackMe-1
-
2005-2-28 16:34
-
请下载：
附件:DT_CrackMe1.rar
I've fixed the bug, now it can run on win9x/2000/XP/2003
附件:DT_CrackMe1.rar
I've fixed the bug, now it can run on win9x/2000/XP/2003
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
搞算法是吧，我手里有很多商业算法，拿出20种，写到一起编译一下，恐怕没几个人能搞吧。
|
|
|
|
|
|
|
|
|
|
|
|
算法不懂,只是爆破
 
|
|
|
|
|
|
最初由 dREAMtHEATER 发布 有10几个小时吧，在AntiDebug上费了不少时间 我对delphi编译结构不熟悉，刚想开始学习delphi，后面只是碰巧让我撞上了 
|
|
|
|
|
|
期待dREAMtHEATER老大的防暴crackme
|
|
|
20分钟爆破
~~
|
|
|
|
|
|
最初由 dREAMtHEATER 发布 可否在CrackMe-2出品时，将CrackMe-1开源呢 (要不先发一份给我玩玩吧 )
|
|
|
|
|
|
|
|
|
|
|
|
这个异常太多
0046B8F2 . 64:8920 mov dword ptr fs:[eax],esp 0046B8F5 . 33C9 xor ecx,ecx 0046B8F7 . B2 01 mov dl,1 0046B8F9 . A1 68714000 mov eax,dword ptr ds:[407168] 0046B8FE . E8 FD07FAFF call 1_.0040C100 0046B903 . E8 9880F9FF call 1_.004039A0 0046B908 . 33C0 xor eax,eax 0046B90A . 5A pop edx 0046B90B . 59 pop ecx 0046B90C . 59 pop ecx 0046B90D . 64:8910 mov dword ptr fs:[eax],edx 0046B910 . E9 D8000000 jmp 1_.0046B9ED 0046B915 .- E9 9A7DF9FF jmp 1_.004036B4 0046B91A . 33C0 xor eax,eax 0046B91C . 55 push ebp 0046B91D . 68 48B94600 push 1_.0046B948 0046B922 . 64:FF30 push dword ptr fs:[eax] 0046B925 . 64:8920 mov dword ptr fs:[eax],esp 0046B928 . 33C9 xor ecx,ecx 0046B92A . B2 01 mov dl,1 0046B92C . A1 68714000 mov eax,dword ptr ds:[407168] 0046B931 . E8 CA07FAFF call 1_.0040C100 0046B936 . E8 6580F9FF call 1_.004039A0 0046B93B . 33C0 xor eax,eax 0046B93D . 5A pop edx 0046B93E . 59 pop ecx 0046B93F . 59 pop ecx 0046B940 . 64:8910 mov dword ptr fs:[eax],edx 0046B943 . E9 A0000000 jmp 1_.0046B9E8 0046B948 .- E9 677DF9FF jmp 1_.004036B4 0046B94D . 33C0 xor eax,eax 0046B94F . 55 push ebp 0046B950 . 68 78B94600 push 1_.0046B978 0046B955 . 64:FF30 push dword ptr fs:[eax] 0046B958 . 64:8920 mov dword ptr fs:[eax],esp 0046B95B . 33C9 xor ecx,ecx 0046B95D . B2 01 mov dl,1 0046B95F . A1 68714000 mov eax,dword ptr ds:[407168] 0046B964 . E8 9707FAFF call 1_.0040C100 0046B969 . E8 3280F9FF call 1_.004039A0 0046B96E . 33C0 xor eax,eax 0046B970 . 5A pop edx 0046B971 . 59 pop ecx 0046B972 . 59 pop ecx 0046B973 . 64:8910 mov dword ptr fs:[eax],edx 0046B976 . EB 6B jmp short 1_.0046B9E3 0046B978 .- E9 377DF9FF jmp 1_.004036B4 0046B97D E8 C6FAFFFF call 1_.0046B448 0046B982 . 0FB6C8 movzx ecx,al 0046B985 . 49 dec ecx 0046B986 . A1 64CC4700 mov eax,dword ptr ds:[47CC64] 0046B98B . 99 cdq 0046B98C F7F9 idiv ecx 0046B98E . A3 64CC4700 mov dword ptr ds:[47CC64],eax 0046B993 . 33C0 xor eax,eax 0046B995 . 55 push ebp 0046B996 . 68 BEB94600 push 1_.0046B9BE 0046B99B . 64:FF30 push dword ptr fs:[eax] 0046B99E . 64:8920 mov dword ptr fs:[eax],esp 0046B9A1 . 33C9 xor ecx,ecx 0046B9A3 . B2 01 mov dl,1 0046B9A5 . A1 68714000 mov eax,dword ptr ds:[407168] 0046B9AA . E8 5107FAFF call 1_.0040C100 0046B9AF E8 EC7FF9FF call 1_.004039A0 0046B9B4 . 33C0 xor eax,eax 0046B9B6 . 5A pop edx 0046B9B7 . 59 pop ecx 0046B9B8 . 59 pop ecx 0046B9B9 64:8910 mov dword ptr fs:[eax],edx 0046B9BC . EB 20 jmp short 1_.0046B9DE 0046B9BE .- E9 F17CF9FF jmp 1_.004036B4 0046B9C3 . E8 F0FCFFFF call 1_.0046B6B8 0046B9C8 . 0FB6C8 movzx ecx,al 0046B9CB . 49 dec ecx 0046B9CC . A1 64CC4700 mov eax,dword ptr ds:[47CC64] 0046B9D1 . 99 cdq 0046B9D2 . F7F9 idiv ecx 0046B9D4 . A3 64CC4700 mov dword ptr ds:[47CC64],eax 0046B9D9 . E8 3E80F9FF call 1_.00403A1C 0046B9DE > E8 3980F9FF call 1_.00403A1C 0046B9E3 > E8 3480F9FF call 1_.00403A1C 0046B9E8 E8 2F80F9FF call 1_.00403A1C 0046B9ED E8 2A80F9FF call 1_.00403A1C 0046B9F2 E8 2580F9FF call 1_.00403A1C 0046B9F7 E8 2080F9FF call 1_.00403A1C 0046B9FC E8 1B80F9FF call 1_.00403A1C 0046BA01 E8 1680F9FF call 1_.00403A1C 0046BA06 E8 1180F9FF call 1_.00403A1C 0046BA0B > 33C0 xor eax,eax 0046BA0D . 5A pop edx 0046BA0E . 59 pop ecx 0046BA0F . 59 pop ecx 0046BA10 64:8910 mov dword ptr fs:[eax],edx 0046BA13 . EB 11 jmp short 1_.0046BA26 0046BA15 .- E9 9A7CF9FF jmp 1_.004036B4
|
