新手破解练习Crackme160之150 - tc.18

Delphi两个窗体, 谁先定义就先启动谁, IDR中可知TForm1就是NAG窗体, 所以, 我们把TForm2与TForm1的顺序改一下就行了

 EntryPoint
 004451A8    push       ebp
 004451A9    mov        ebp,esp
 004451AB    add        esp,0FFFFFFF4
 004451AE    mov        eax,445068
 004451B3    call       @InitExe
 004451B8    mov        eax,[00446CDC]; ^Application:TApplication
 004451BD    mov        eax,dword ptr [eax]
 004451BF    call       TApplication.Initialize
 004451C4    mov        ecx,dword ptr ds:[446DB0]; ^gvar_0044787C:TForm1
 004451CA    mov        eax,[00446CDC]; ^Application:TApplication
 004451CF    mov        eax,dword ptr [eax]
 004451D1    mov        edx,dword ptr ds:[444E70]; TForm1
 004451D7    call       TApplication.CreateForm
 004451DC    mov        ecx,dword ptr ds:[446DD4]; ^gvar_00447874:TForm2
 004451E2    mov        eax,[00446CDC]; ^Application:TApplication
 004451E7    mov        eax,dword ptr [eax]
 004451E9    mov        edx,dword ptr ds:[444B8C]; TForm2
 004451EF    call       TApplication.CreateForm
 004451F4    mov        eax,[00446CDC]; ^Application:TApplication
 004451F9    mov        eax,dword ptr [eax]
 004451FB    call       TApplication.Run
 00445200    call       @Halt0

具体操作为, OD载入程序, 将下面代码:

004451C4   .  8B0D B06D4400 mov ecx,dword ptr ds:[0x446DB0]          ;  tc_18.0044787C
004451CA   .  A1 DC6C4400   mov eax,dword ptr ds:[0x446CDC]
004451CF   .  8B00          mov eax,dword ptr ds:[eax]
004451D1   .  8B15 704E4400 mov edx,dword ptr ds:[0x444E70]          ;  tc_18.00444EBC
004451D7   .  E8 A093FFFF   call tc_18.0043E57C
004451DC   .  8B0D D46D4400 mov ecx,dword ptr ds:[0x446DD4]          ;  tc_18.00447874
004451E2   .  A1 DC6C4400   mov eax,dword ptr ds:[0x446CDC]
004451E7   .  8B00          mov eax,dword ptr ds:[eax]
004451E9   .  8B15 8C4B4400 mov edx,dword ptr ds:[0x444B8C]          ;  tc_18.00444BD8

对应改为:

004451C4      8B0D DC6D4400 mov ecx,dword ptr ds:[0x446DD4]          ;  tc_18.0040ABDC	;这里
004451CA   .  A1 DC6C4400   mov eax,dword ptr ds:[0x446CDC]
004451CF   .  8B00          mov eax,dword ptr ds:[eax]
004451D1      8B15 8C4B4400 mov edx,dword ptr ds:[0x444B8C]          ;  tc_18.00444BD8	;这里
004451D7   .  E8 A093FFFF   call tc_18.0043E57C
004451DC      8B0D B06D4400 mov ecx,dword ptr ds:[0x446DB0]          ;  tc_18.0044787C	;这里
004451E2   .  A1 DC6C4400   mov eax,dword ptr ds:[0x446CDC]
004451E7   .  8B00          mov eax,dword ptr ds:[eax]
004451E9      8B15 704E4400 mov edx,dword ptr ds:[0x444E70]          ;  tc_18.00444EBC	;这里

修改完保存全部修改,搞定~ 简单吧^ _ ^

 
 
 
这是160个软件part1
这是160个软件part2

1~160每个破解过程,在吾爱破解论坛都有高手破解过了,也有整理好现成的, 我这边主要就是自己动手操作的过程,与他们的不太一样
附上高手们的连接: 点击前往查看
使用的工具连接(工具有点多有点大,可以先下OD,其它的后面慢慢下) 点击前往下载

新人入门教程"玩玩破解，写给新人看" 点击前往查看
我就是从这里开始的,对我这样的小白感觉超级友好~

下面是我的OD的界面布局,我觉得这4个是最常用的界面,其它的我基本上没用到~