大家好,我最近在练习破解 DnNukes Crackme v1.1,我遇到了问题,我的操作系统是WINXP SP3 的,听说在XP下无法使用hmemcpy指令。
先来说下我的破解思路:先执行待破解的程序,出现对话框,上面有几个按钮:“OK”,“ABOUT”,“QUIT”,下面有个编辑框,可以输入,但是输入时是看不到输入数字的,随便输入“123456789”,点“OK”,没有任何反应,说明输入错了。
用PEID查壳,发现是UPX的壳,用UPX -D脱壳,再次用PEID查,发现是DELPHI编的程序;
OD载入,F9执行,对话框出现了,先用查找字符串方式,可以看到:
mov edx, 004556C8 ASCII "9877553311"
mov edx, 004556DC ASCII "Yer almost
mov edx, 0045572C ASCII "9977553311"
mov ecx, 00455738 ASCII "Good crackah :)"
mov edx, 00455748 ASCII "Damn yer good ;). But if this is your first time, then I guess you changed the flag to 0 wich is wrong! Now go back and try again :).. But if ya did make it plz mail me how you did it.. DnNuke@yahoo.com"