160个crakeme之cracking4all.1.exe

最新推荐文章于 2022-06-18 16:50:02 发布
最新推荐文章于 2022-06-18 16:50:02 发布
阅读量270 收藏 1
点赞数 3
分类专栏： 开发 学习 文章标签： 逆向 编程
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/qq_36535153/article/details/102986559
版权

这是一个VB代码,逻辑和算法也不复杂,唯一的问题是对VB的API不够了解.所以需要百度API的作用.这里我就贴出我破解这个程序的思路…

查找字符串定位关键代码段

在这里插入图片描述
如图所示,错误之后提示 password incorrect ,所以搜索该字符串
在这里插入图片描述
双击该password correct ,hehe,:-)字符串后定位到如下位置:
在这里插入图片描述
继续往上拉,在004030F0处下断点
在这里插入图片描述
输入密码之后,点击按钮,程序断下 往下走,看到输入的字符串的值和长度
在这里插入图片描述

004031A2   .  FF15 14614000 call dword ptr ds:[<&MSVBVM50.__vbaHresultCheckObj>] ;  Msvbvm50.__vbaHresultCheckObj
004031A8   >  8B45 C0       mov eax,dword ptr ss:[ebp-0x40]                      ;  获取输入的密码
004031AB   .  8D55 A8       lea edx,dword ptr ss:[ebp-0x58]
004031AE   .  8D4D D8       lea ecx,dword ptr ss:[ebp-0x28]
004031B1   .  8975 C0       mov dword ptr ss:[ebp-0x40],esi
004031B4   .  8945 B0       mov dword ptr ss:[ebp-0x50],eax
004031B7   .  C745 A8 08000>mov dword ptr ss:[ebp-0x58],0x8
004031BE   .  FF15 F8604000 call dword ptr ds:[<&MSVBVM50.__vbaVarMove>]         ;  Msvbvm50.__vbaVarMove
004031C4   .  8D4D B8       lea ecx,dword ptr ss:[ebp-0x48]
004031C7   .  FF15 B0614000 call dword ptr ds:[<&MSVBVM50.__vbaFreeObj>]         ;  Msvbvm50.__vbaFreeObj
004031CD   .  8D4D D8       lea ecx,dword ptr ss:[ebp-0x28]
004031D0   .  8D55 A8       lea edx,dword ptr ss:[ebp-0x58]
004031D3   .  51            push ecx                                             ; /var18 = 00000007
004031D4   .  52            push edx                                             ; |retBuffer8 = 0019F248
004031D5   .  BE 01000000   mov esi,0x1                                          ; |
004031DA   .  FF15 18614000 call dword ptr ds:[<&MSVBVM50.__vbaLenVar>]          ; \__vbaLenVar
004031E0   .  50            push eax
004031E1   .  FF15 74614000 call dword ptr ds:[<&MSVBVM50.__vbaI2Var>]           ;  Msvbvm50.__vbaI2Var
004031E7   .  8985 F8FEFFFF mov dword ptr ss:[ebp-0x108],eax                     ;  这里得到输入字符串的长度
004031ED   .  8BFE          mov edi,esi
004031EF   >  66:3BBD F8FEF>cmp di,word ptr ss:[ebp-0x108]                       ;  比较di 和输入的字符串的长度,大于则跳出循环
004031F6   .  8B1D 6C614000 mov ebx,dword ptr ds:[<&MSVBVM50.__vbaStrVarVal>]    ;  Msvbvm50.__vbaStrVarVal
004031FC   .  0F8F 2D010000 jg cracking.0040332F
00403202   .  66:83FE 04    cmp si,0x4                                           ;  如果si大于4 则不跳 将esi 重新赋值为1
00403206   .  7E 05         jle short cracking.0040320D
00403208   .  BE 01000000   mov esi,0x1
0040320D   >  0FBFCF        movsx ecx,di
00403210   .  8D45 A8       lea eax,dword ptr ss:[ebp-0x58]
00403213   .  8D55 D8       lea edx,dword ptr ss:[ebp-0x28]
00403216   .  50            push eax                                             ; /Length8 = 0x7
00403217   .  51            push ecx                                             ; |Start = 0x7
00403218   .  8D45 98       lea eax,dword ptr ss:[ebp-0x68]                      ; |
0040321B   .  52            push edx                                             ; |dString8 = 0019F248
0040321C   .  50            push eax                                             ; |RetBUFFER = 00000007
0040321D   .  C745 B0 01000>mov dword ptr ss:[ebp-0x50],0x1                      ; |
00403224   .  C745 A8 02000>mov dword ptr ss:[ebp-0x58],0x2                      ; |
0040322B   .  FF15 38614000 call dword ptr ds:[<&MSVBVM50.#rtcMidCharVar_632>]   ; \rtcMidCharVar
00403231   .  B8 02000000   mov eax,0x2
00403236   .  8D8D 78FFFFFF lea ecx,dword ptr ss:[ebp-0x88]
0040323C   .  0FBFD6        movsx edx,si
0040323F   .  8985 78FFFFFF mov dword ptr ss:[ebp-0x88],eax
00403245   .  8945 88       mov dword ptr ss:[ebp-0x78],eax
00403248   .  51            push ecx                                             ; /Length8 = 0x7
00403249   .  8D45 88       lea eax,dword ptr ss:[ebp-0x78]                      ; |
0040324C   .  52            push edx                                             ; |Start = 0x19F248
0040324D   .  8D8D 68FFFFFF lea ecx,dword ptr ss:[ebp-0x98]                      ; |
00403253   .  50            push eax                                             ; |dString8 = 00000007
00403254   .  51            push ecx                                             ; |RetBUFFER = 00000007
00403255   .  C745 80 01000>mov dword ptr ss:[ebp-0x80],0x1                      ; |
0040325C   .  C745 90 D0070>mov dword ptr ss:[ebp-0x70],0x7D0                    ; |
00403263   .  FF15 38614000 call dword ptr ds:[<&MSVBVM50.#rtcMidCharVar_632>]   ; \rtcMidCharVar
00403269   .  8D55 98       lea edx,dword ptr ss:[ebp-0x68]
0040326C   .  8D45 C0       lea eax,dword ptr ss:[ebp-0x40]
0040326F   .  52            push edx
00403270   .  50            push eax
00403271   .  FFD3          call ebx                                             ;  cracking.004043C8
00403273   .  50            push eax                                             ; /String = 00000007 ???
00403274   .  FF15 0C614000 call dword ptr ds:[<&MSVBVM50.#rtcAnsiValueBstr_516>>; \rtcAnsiValueBstr
0040327A   .  0FBFD0        movsx edx,ax
0040327D   .  8D8D 68FFFFFF lea ecx,dword ptr ss:[ebp-0x98]                      ;  获取输入字符串的值转成ascii
00403283   .  8D45 BC       lea eax,dword ptr ss:[ebp-0x44]
00403286      51            push ecx
00403287      50            push eax
00403288   .  8995 E8FEFFFF mov dword ptr ss:[ebp-0x118],edx                     ;  2  0  0  0
0040328E   .  FFD3          call ebx                                             ;  cracking.004043C8
00403290   .  50            push eax                                             ; /String = 00000007 ???
00403291   .  FF15 0C614000 call dword ptr ds:[<&MSVBVM50.#rtcAnsiValueBstr_516>>; \rtcAnsiValueBstr
00403297   .  8B95 E8FEFFFF mov edx,dword ptr ss:[ebp-0x118]                     ;  从某地址中读取到数值转化成ascii
0040329D   .  0FBFC8        movsx ecx,ax
004032A0   .  33D1          xor edx,ecx                                          ;  进行xor
004032A2   .  8D85 58FFFFFF lea eax,dword ptr ss:[ebp-0xA8]
004032A8   .  52            push edx
004032A9   .  50            push eax
004032AA   .  FF15 64614000 call dword ptr ds:[<&MSVBVM50.#rtcVarBstrFromAnsi_60>;  Msvbvm50.rtcVarBstrFromAnsi
004032B0   .  8D4D C8       lea ecx,dword ptr ss:[ebp-0x38]
004032B3   .  8D95 58FFFFFF lea edx,dword ptr ss:[ebp-0xA8]
004032B9   .  51            push ecx                                             ;  将xor后的值转成ascii
004032BA   .  8D85 48FFFFFF lea eax,dword ptr ss:[ebp-0xB8]
004032C0   .  52            push edx
004032C1   .  50            push eax
004032C2   .  FF15 70614000 call dword ptr ds:[<&MSVBVM50.__vbaVarCat>]          ;  Msvbvm50.__vbaVarCat
004032C8   .  8BD0          mov edx,eax                                          ;  将计算的结果拼接起来,形成新的字符串
004032CA   .  8D4D C8       lea ecx,dword ptr ss:[ebp-0x38]                      ;  ecx=0x6A4C7C
004032CD   .  FF15 F8604000 call dword ptr ds:[<&MSVBVM50.__vbaVarMove>]         ;  Msvbvm50.__vbaVarMove
004032D3   .  8D4D BC       lea ecx,dword ptr ss:[ebp-0x44]
004032D6   .  8D55 C0       lea edx,dword ptr ss:[ebp-0x40]
004032D9   .  51            push ecx
004032DA   .  52            push edx
004032DB   .  6A 02         push 0x2
004032DD   .  FF15 8C614000 call dword ptr ds:[<&MSVBVM50.__vbaFreeStrList>]     ;  Msvbvm50.__vbaFreeStrList
004032E3   .  83C4 0C       add esp,0xC
004032E6   .  8D85 58FFFFFF lea eax,dword ptr ss:[ebp-0xA8]
004032EC   .  8D8D 68FFFFFF lea ecx,dword ptr ss:[ebp-0x98]
004032F2   .  8D95 78FFFFFF lea edx,dword ptr ss:[ebp-0x88]
004032F8   .  50            push eax
004032F9   .  51            push ecx
004032FA   .  8D45 88       lea eax,dword ptr ss:[ebp-0x78]
004032FD   .  52            push edx
004032FE   .  8D4D 98       lea ecx,dword ptr ss:[ebp-0x68]
00403301   .  50            push eax
00403302   .  8D55 A8       lea edx,dword ptr ss:[ebp-0x58]
00403305   .  51            push ecx
00403306   .  52            push edx
00403307   .  6A 06         push 0x6
00403309   .  FF15 00614000 call dword ptr ds:[<&MSVBVM50.__vbaFreeVarList>]     ;  Msvbvm50.__vbaFreeVarList
0040330F   .  83C4 1C       add esp,0x1C
00403312   .  66:46         inc si
00403314   .  B8 01000000   mov eax,0x1
00403319   .  66:03C7       add ax,di
0040331C   .  0F80 44020000 jo cracking.00403566
00403322   .  0F80 3E020000 jo cracking.00403566
00403328   .  8BF8          mov edi,eax
0040332A   .^ E9 C0FEFFFF   jmp cracking.004031EF
0040332F   >  8D45 C8       lea eax,dword ptr ss:[ebp-0x38]                      ;  循环结束,跳转到这里
00403332   .  8D8D 38FFFFFF lea ecx,dword ptr ss:[ebp-0xC8]
00403338   .  50            push eax                                             ; /var18 = 00000007
00403339   .  51            push ecx                                             ; |var28 = 00000007
0040333A   .  C785 40FFFFFF>mov dword ptr ss:[ebp-0xC0],cracking.004027C8        ; |qBQSYdXUe_B\V
00403344   .  C785 38FFFFFF>mov dword ptr ss:[ebp-0xC8],0x8008                   ; |
0040334E   .  FF15 44614000 call dword ptr ds:[<&MSVBVM50.__vbaVarTstEq>]        ; \__vbaVarTstEq
00403354   .  66:85C0       test ax,ax                                           ;  关键比较函数
00403357   .  B9 04000280   mov ecx,0x80020004                                   ;  将拼接后的字符串与这里的地址的字符串比较,成功则返回eax=1,失败eax=0
0040335C   .  B8 0A000000   mov eax,0xA
00403361   .  894D 80       mov dword ptr ss:[ebp-0x80],ecx
00403364   .  8985 78FFFFFF mov dword ptr ss:[ebp-0x88],eax
0040336A   .  894D 90       mov dword ptr ss:[ebp-0x70],ecx
0040336D   .  8945 88       mov dword ptr ss:[ebp-0x78],eax
00403370   .  0F84 E8000000 je cracking.0040345E                                 ;  往上翻定位到关键跳转
00403376   .  8B35 9C614000 mov esi,dword ptr ds:[<&MSVBVM50.__vbaVarDup>]       ;  Msvbvm50.__vbaVarDup
0040337C   .  BF 08000000   mov edi,0x8
00403381   .  8D95 28FFFFFF lea edx,dword ptr ss:[ebp-0xD8]
00403387   .  8D4D 98       lea ecx,dword ptr ss:[ebp-0x68]
0040338A   .  C785 30FFFFFF>mov dword ptr ss:[ebp-0xD0],cracking.00402824        ;  Valid
00403394   .  89BD 28FFFFFF mov dword ptr ss:[ebp-0xD8],edi
0040339A   .  FFD6          call esi                                             ;  <&MSVBVM50.__vbaVarDup>
0040339C   .  8D95 38FFFFFF lea edx,dword ptr ss:[ebp-0xC8]
004033A2   .  8D4D A8       lea ecx,dword ptr ss:[ebp-0x58]
004033A5   .  C785 40FFFFFF>mov dword ptr ss:[ebp-0xC0],cracking.004027E8        ;  Password correct, hehe, :-)
004033AF   .  89BD 38FFFFFF mov dword ptr ss:[ebp-0xC8],edi
004033B5   .  FFD6          call esi
004033B7   .  8D95 78FFFFFF lea edx,dword ptr ss:[ebp-0x88]
004033BD   .  8D45 88       lea eax,dword ptr ss:[ebp-0x78]
004033C0   .  52            push edx
004033C1   .  8D4D 98       lea ecx,dword ptr ss:[ebp-0x68]
004033C4   .  50            push eax
004033C5   .  51            push ecx
004033C6   .  8D55 A8       lea edx,dword ptr ss:[ebp-0x58]
004033C9   .  6A 00         push 0x0
004033CB   .  52            push edx
004033CC   .  FF15 24614000 call dword ptr ds:[<&MSVBVM50.#rtcMsgBox_595>]       ;  Msvbvm50.rtcMsgBox
004033D2   .  8D85 78FFFFFF lea eax,dword ptr ss:[ebp-0x88]
004033D8   .  8D4D 88       lea ecx,dword ptr ss:[ebp-0x78]
004033DB   .  50            push eax
004033DC   .  8D55 98       lea edx,dword ptr ss:[ebp-0x68]
004033DF   .  51            push ecx
004033E0   .  8D45 A8       lea eax,dword ptr ss:[ebp-0x58]
004033E3   .  52            push edx
004033E4   .  50            push eax
004033E5   .  6A 04         push 0x4
004033E7   .  FF15 00614000 call dword ptr ds:[<&MSVBVM50.__vbaFreeVarList>]     ;  Msvbvm50.__vbaFreeVarList
004033ED   .  A1 A4434000   mov eax,dword ptr ds:[0x4043A4]
004033F2   .  83C4 14       add esp,0x14
004033F5   .  85C0          test eax,eax
004033F7   .  75 10         jnz short cracking.00403409
004033F9   .  68 A4434000   push cracking.004043A4
004033FE   .  68 50284000   push cracking.00402850
00403403   .  FF15 80614000 call dword ptr ds:[<&MSVBVM50.__vbaNew2>]            ;  Msvbvm50.__vbaNew2
00403409   >  A1 38404000   mov eax,dword ptr ds:[0x404038]
0040340E   .  8B35 A4434000 mov esi,dword ptr ds:[0x4043A4]
00403414   .  85C0          test eax,eax
00403416   .  75 10         jnz short cracking.00403428
00403418   .  68 38404000   push cracking.00404038
0040341D   .  68 6C204000   push cracking.0040206C
00403422   .  FF15 80614000 call dword ptr ds:[<&MSVBVM50.__vbaNew2>]            ;  Msvbvm50.__vbaNew2
00403428   >  8B0D 38404000 mov ecx,dword ptr ds:[0x404038]
0040342E   .  8B3E          mov edi,dword ptr ds:[esi]
00403430   .  8D55 B8       lea edx,dword ptr ss:[ebp-0x48]
00403433   .  51            push ecx
00403434   .  52            push edx
00403435   .  FF15 2C614000 call dword ptr ds:[<&MSVBVM50.__vbaObjSetAddref>]    ;  Msvbvm50.__vbaObjSetAddref
0040343B   .  50            push eax
0040343C   .  56            push esi
0040343D   .  FF57 10       call dword ptr ds:[edi+0x10]
00403440   .  85C0          test eax,eax
00403442   .  7D 0F         jge short cracking.00403453
00403444   .  6A 10         push 0x10
00403446   .  68 40284000   push cracking.00402840
0040344B   .  56            push esi
0040344C   .  50            push eax
0040344D   .  FF15 14614000 call dword ptr ds:[<&MSVBVM50.__vbaHresultCheckObj>] ;  Msvbvm50.__vbaHresultCheckObj
00403453   >  8D4D B8       lea ecx,dword ptr ss:[ebp-0x48]
00403456   .  FF15 B0614000 call dword ptr ds:[<&MSVBVM50.__vbaFreeObj>]         ;  Msvbvm50.__vbaFreeObj
0040345C   .  EB 7A         jmp short cracking.004034D8
0040345E   >  8B35 9C614000 mov esi,dword ptr ds:[<&MSVBVM50.__vbaVarDup>]       ;  Msvbvm50.__vbaVarDup
00403464   .  BF 08000000   mov edi,0x8
00403469   .  8D95 28FFFFFF lea edx,dword ptr ss:[ebp-0xD8]
0040346F   .  8D4D 98       lea ecx,dword ptr ss:[ebp-0x68]
00403472   .  C785 30FFFFFF>mov dword ptr ss:[ebp-0xD0],cracking.004028BC        ;  Invalid
0040347C   .  89BD 28FFFFFF mov dword ptr ss:[ebp-0xD8],edi
00403482   .  FFD6          call esi                                             ;  <&MSVBVM50.__vbaVarDup>
00403484   .  8D95 38FFFFFF lea edx,dword ptr ss:[ebp-0xC8]
0040348A   .  8D4D A8       lea ecx,dword ptr ss:[ebp-0x58]
0040348D   .  C785 40FFFFFF>mov dword ptr ss:[ebp-0xC0],cracking.00402864        ;  Password incorrect, please try again ...
00403497   .  89BD 38FFFFFF mov dword ptr ss:[ebp-0xC8],edi
0040349D   .  FFD6          call esi
0040349F   .  8D85 78FFFFFF lea eax,dword ptr ss:[ebp-0x88]
004034A5   .  8D4D 88       lea ecx,dword ptr ss:[ebp-0x78]
004034A8   .  50            push eax
004034A9   .  8D55 98       lea edx,dword ptr ss:[ebp-0x68]
004034AC   .  51            push ecx
004034AD   .  52            push edx
004034AE   .  8D45 A8       lea eax,dword ptr ss:[ebp-0x58]

在这里插入图片描述

在这里插入图片描述

#include <stdio.h>
#include <String.h>

using namespace std;

int main()
{
    //qBQSYdXUe_B\V
    char key[] = {"qBQSYdXUe_B\\V"};//我用codeblock写的,这里为了避免转义字符'\' 所以我用了双反斜杠
    int j =0;
    char result[32] = {0};
    char cal[4] = {0x32,0x30,0x30,0x30};

    for(int i =0; i < strlen(key);i++)
    {
        printf("%d : %c", i,key[i]^cal[j%4]);

        result[i] = key[i]^cal[j%4];
        j++;
    }

    printf("%s",result);
    return 0;
}

结果如下:
在这里插入图片描述

还好一切都可以重来
关注
  • 3
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
一个注册码的算法反编
07-20
Sub cmdReg_Click() 'N * ref: __vbaExceptHandler 'N * ref: __vbaObjSet 'N * ref: __vbaHresultCheckObj 'N * ref: __vbaFreeObj 'N * ref: __vbaObjSet 'N * ref: __vbaHresultCheckObj 'N * ref: __vbaFreeObj 'N * ref: __vbaHresultCheckObj 'N * ref: Trim( 'N * ref: __vbaVarTstEq 'N * ref: __vbaFreeObj 'N * ref: __vbaFreeVarList 'N * ref: __vbaObjSet 'N * ref: __vbaHresultCheckObj 'N * ref: __vbaFreeObj 'N * ref: __vbaVarDup
Cracking.Codes.with.Python.2018.1.epub
06-01
Cracking.Codes.with.Python.2018.1.epub Cracking.Codes.with.Python.2018.1.epub
DevXUnityUnpackerTools 2.73 Cracked.rar_astcenc.exe_clothingyaj_
07-15
Unity3D Unpack tool....
Cracking.the.IT.Architect.Interview
01-03
Key Features Learn about Enterprise Architects IT strategy and NFR – this book provides you with methodologies, best practices, and frameworks to ace your interview A holistic view of key architectural skills and competencies with 500+ questions that cover 12 domains 100+ diagrams depicting scenarios, models, and methodologies designed to help you prepare for your interview Book Description An architect attends multiple interviews for jobs or projects during the course of his or her career. This book is an interview resource created for designers, consultants, technical, solution, domain, enterprise, and chief architects to help them perform well in interview discussions and launch a successful career. The book begins by providing descriptions of architecture skills and competencies that cover the 12 key domains, including 350+ questions relating to these domains. The goal of this book is to cover all the core architectural domains. From an architect’s perspective, it is impossible to revise or learn about all these key areas without a good reference guide – this book is the solution. It shares experiences, learning, insights, and proven methodologies that will benefit practitioners, SMEs, and aspirants in the long run. This book will help you tackle the NFR domain, which is a key aspect pertaining to architecting applications. It typically takes years to understand the core concepts, fundamentals, patterns, and principles related to architecture and designs. This book is a goldmine for the typical questions asked during an interview and will help prepare you for success! What you will learn Learn about IT strategies, NFR, methodologies, best practices, and frameworks to ace your interview Get a holistic view of key concepts, design principles, and patterns related to evangelizing web and Java enterprise applications Discover interview preparation guidelines through case studies Use this as a reference guide for adopting best practices, standards, and design guidelines Get a better understanding with 60+ diagrams depicting various scenarios, models, and methodologies Benefit from coverage of all architecture domains including EA (Business, Data, Infrastructure, and Application), SA, integration, NFRs, security, and SOA, with extended coverage from IT strategies to the NFR domain About the Author Sameer Paradkar is an enterprise architect with 15+ years of solid experience in the ICT industry which spans across consulting, systems integration, and product development. He is an Open Group TOGAF, Oracle Master Java EA, TMForum NGOSS, IBM SOA Solutions, IBM Cloud Solutions, IBM MobileFirst, ITIL Foundation V3 and COBIT 5 certified enterprise architect. He serves as an advisory architect on enterprise architecture programs and continues to work as a subject matter expert. He has worked on multiple architecture transformations and modernization engagements in the USA, UK, Europe, Asia Pacific and the Middle East Regions that presented a phased roadmap to the transformation that maximized the business value while minimizing risks and costs. Sameer is part of IT Strategy and Transformation Practice in AtoS. Prior to AtoS, he has worked in organizations such as EY - IT Advisory, IBM GBS, Wipro Consulting Services, TechMahindra, and Infosys Technologies and specializes in IT strategies and enterprise transformation engagements. Table of Contents Chapter 1. Architect Roles and Growth Paths Chapter 2. IT Strategy and Advisory Chapter 3. Enterprise Architecture and Modernization Chapter 4. SOA and Integration Chapter 5. Solution Architecture and Design Chapter 6. Emerging Technologies Chapter 7. Methodologies, Frameworks, and NFRs Chapter 8. Interview Preparation
Cracking.Codes.with.Python.2018.1
05-16
Cracking Codes with Python 2018.1 Python 网络安全
[反汇编练习] 160个CrackMe之002
LindaXu1220的博客
06-10 127
[反汇编练习] 160个CrackMe之002。 本系列文章的目的是从一个没有任何经验的新手的角度(其实就是我自己)，一步步尝试将160个CrackMe全部破解，如果可以，通过任何方式写出一个类似于注册机的东西。 其中，文章中按照如下逻辑编排（解决如下问题）： 1、使用什么环境和工具 2、程序分析 3、思路分析和破解流程 4、注册机的探索 1、工具和环境...
【逆向入门】 CrackMe160-002 分析思路
mastergu2的博客
04-24 546
CrackMe160-002 爆破思路 同001，从调用堆栈找到关键函数，进入 稍微向上翻一下即可看到字符串（字符串前面的L说明该字符串是由Unicode编码） 在转储中右键->十六进制->拓展ASCII 即可查看Unicode 有点偏题了。。那么按照001的思路这里可以同样的爆破，就不赘述了，把重头戏还是放在序列生成比较好 序列生成 老样子，这里断点打到判断之前，不过并没有发现类似cmp这样的指令，于是乎我考虑断点再段前面一些 00402310 | 55
莱鸟破解入门之注册码追踪
菜菜鸟_黑马的专栏
04-28 3092
【软件名称】：Crackme 2005 #3 - KuNgBiM　　　【软件大小】： KB【下载地址】：Crackme区【软件简介】：【软件限制】：【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！【破解工具】：flyodbg,peid————————————————————————————————————
VB的一些函数
LLC
08-20 2133
在逆一个crackme，vb写的，注册成功，标签上有提示，注册失败，标签上无提示，对于VB程序的套路，我还是不太熟悉， 贴上一些VB函数   00401000 >72A49841 msvbvm60.__vbaVarTstGt 00401004 >72A477EA msvbvm60.__vbaVarSub 00401008 >72A20507 msvbvm60.__vbaStrI2
160 - 22 CarLitoZ.1
123
11-04 285
环境 Windows xp sp3工具 exeinfope Ollydbg查壳 无壳的VB程序 测试 输入“1234567” 显示这个： 直接OD载入字符串搜索。00402D20 > \55 push ebp 00402D21 . 8BEC mov ebp,esp 00402D23 . 83EC 0C sub esp
160个CrackMe之11
_KaQqi的博客
09-16 528
我不是大神，只是一个菜鸟，所以文章中有哪里不对的地方还请各位大佬们指出。 0x0 寻找验证函数 仔细看一下CM 发现没有任何验证的地方，于是我猜测应该有个时钟或者线程在一直验证注册码是否正确。 直接给SetWindowTextA下断点，然后点击按钮1即可断下。 返回到0x004035A1处，向上滚动滚轮找到函数头0x004034E0处，下断点然后F9 再点击刚才的按钮即可断下。 这段
160 - 31 cracking4all.2
123
11-28 200
160 - 31 cracking4all.2
160个练手CrackMe-014
还是上会网吧～
10-25 341
1、无壳，VB编写2、VB Decompiler反编译出来的代码看着真的蓝瘦，配合OD调试。004036D3 . FF15 24104000 call dword ptr ds:[<&MSVBVM60.__vbaHresu>; MSVBVM60.__vbaHresultCheckObj 004036D9 > 8B45 E4 mov eax,dword ptr ss:[ebp
逆向破解之160个CrackMe —— 015
weixin_30312563的博客
08-21 101
CrackMe —— 015 160 CrackMe 是比较适合新手学习逆向破解的CrackMe的一个集合一共160个待逆向破解的程序 CrackMe:它们都是一些公开给别人尝试破解的小程序，制作 crackme 的人可能是程序员，想测试一下自己的软件保护技术，也可能是一位 cracker，想挑战一下其它 cracker 的破解实力，也可能是一些正在学习破解的人，自己编一些小程序给自...
吾爱破解160个crackme之008 009 0010 0011
热门推荐
foyjog的研究生涯
08-31 4万+
这四个题都是一个人出的，怎么说，还是比较简单的，我们一个一个的来观察。 这四个题目都是vb编写，而且没有加壳。 008： 比较简单，打开一看，就是单纯的serial： 拖进od，查找字符串，关键点就出来了： 查看代码：00401D73 . 51 push ecx ; Andréna.<Mo
160 - 30 cracking4all.1
123
11-20 163
160 - 30 cracking4all.1
windows下Cmake配置vs2022工程
qq_36535153的博客
06-18 1万+
我电脑安装的是vs2019但是 cmake的gui 没有vs2022的选项解决方法如下 先利用vs2022创建一个cmake项目 在项目路径下执行命令 生成如下 我们再去看cmake的配置UI上看 就已经有了我们的vs2022的选项了 这下我们直接点击finish 生成即可......
cracking the coding interview 下载
最新发布
01-09
《Cracking the Coding Interview》是一本非常受欢迎的编程面试准备指南，它的中文版可以通过不同的途径进行下载。 首先，你可以在一些知名的电子书下载网站上搜索这本书的中文版，比如某些国内的电子书站点。在这些网站上，你可以找到以PDF、EPUB或MOBI等格式提供的电子书文件。一旦你找到了符合你需求的文件，你就可以下载并阅读它。 其次，你也可以通过一些在线资源分享社区或者论坛来寻找这本书的下载链接。在这些地方，会有一些热心的人们分享了他们找到的电子书资源。你可以在这些社区或论坛上搜索相关的帖子或询问其他会员是否有这本书的中文版下载链接。 最后，如果你喜欢纸质书籍，你可以查找一些在线书店或者淘宝、京东等电商平台，这些平台上通常也会出售《Cracking the Coding Interview》的中文版纸质书。你可以直接购买一本实体书进行阅读，这样也能更好地提升面试准备的效果。 总而言之，无论你选择下载电子版还是购买实体书，《Cracking the Coding Interview》这本书对于面试准备非常有帮助，通过适当的准备和实践，你可以提高自己在编程面试中的表现。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值