新CrackMe160之137 - Get%20The%20Password

代码很少,可以直接看算法关键部分:

00401057  |> /AC            /lods byte ptr ds:[esi]
00401058  |. |3C 0D         |cmp al,0xD
0040105A  |. |74 7C         |je short crackme1.004010D8
0040105C  |. |41            |inc ecx
0040105D  |. |80F9 01       |cmp cl,0x1                                     ;  Switch (cases 1..9)
00401060  |. |75 08         |jnz short crackme1.0040106A
00401062  |. |42            |inc edx                                        ;  Case 1 of switch 0040105D
00401063  |. |3C 47         |cmp al,0x47                                    ;  > G
00401065  |.^ 77 F0         |ja short crackme1.00401057
00401067  |. |4A            |dec edx
00401068  |.^ EB ED         |jmp short crackme1.00401057
0040106A  |> |80F9 02       |cmp cl,0x2
0040106D  |. |75 08         |jnz short crackme1.00401077
0040106F  |. |42            |inc edx                                        ;  Case 2 of switch 0040105D
00401070  |. |3C 6D         |cmp al,0x6D                                    ;  < m
00401072  |.^ 7C E3         |jl short crackme1.00401057
00401074  |. |4A            |dec edx
00401075  |.^ EB E0         |jmp short crackme1.00401057
00401077  |> |80F9 03       |cmp cl,0x3
0040107A  |. |75 08         |jnz short crackme1.00401084
0040107C  |. |42            |inc edx                                        ;  Case 3 of switch 0040105D
0040107D  |. |3C 56         |cmp al,0x56                                    ;  = V
0040107F  |.^ 74 D6         |je short crackme1.00401057
00401081  |. |4A            |dec edx
00401082  |.^ EB D3         |jmp short crackme1.00401057
00401084  |> |80F9 04       |cmp cl,0x4
00401087  |. |75 08         |jnz short crackme1.00401091
00401089  |. |42            |inc edx                                        ;  Case 4 of switch 0040105D
0040108A  |. |3C 66         |cmp al,0x66                                    ;  >= f
0040108C  |.^ 73 C9         |jnb short crackme1.00401057
0040108E  |. |4A            |dec edx
0040108F  |.^ EB C6         |jmp short crackme1.00401057
00401091  |> |80F9 05       |cmp cl,0x5
00401094  |. |75 08         |jnz short crackme1.0040109E
00401096  |. |42            |inc edx                                        ;  Case 5 of switch 0040105D
00401097  |. |3C 33         |cmp al,0x33                                    ;  <= 3
00401099  |.^ 76 BC         |jbe short crackme1.00401057
0040109B  |. |4A            |dec edx
0040109C  |.^ EB B9         |jmp short crackme1.00401057
0040109E  |> |80F9 06       |cmp cl,0x6
004010A1  |. |75 08         |jnz short crackme1.004010AB
004010A3  |. |42            |inc edx                                        ;  Case 6 of switch 0040105D
004010A4  |. |3C 79         |cmp al,0x79                                    ;  > y
004010A6  |.^ 77 AF         |ja short crackme1.00401057
004010A8  |. |4A            |dec edx
004010A9  |.^ EB AC         |jmp short crackme1.00401057
004010AB  |> |80F9 07       |cmp cl,0x7
004010AE  |. |75 08         |jnz short crackme1.004010B8
004010B0  |. |42            |inc edx                                        ;  Case 7 of switch 0040105D
004010B1  |. |3C 38         |cmp al,0x38                                    ;  >= 8
004010B3  |.^ 7D A2         |jge short crackme1.00401057
004010B5  |. |4A            |dec edx
004010B6  |.^ EB 9F         |jmp short crackme1.00401057
004010B8  |> |80F9 08       |cmp cl,0x8
004010BB  |. |75 08         |jnz short crackme1.004010C5
004010BD  |. |42            |inc edx                                        ;  Case 8 of switch 0040105D
004010BE  |. |3C 4E         |cmp al,0x4E                                    ;  < N
004010C0  |.^ 7C 95         |jl short crackme1.00401057
004010C2  |. |4A            |dec edx
004010C3  |.^ EB 92         |jmp short crackme1.00401057
004010C5  |> |80F9 09       |cmp cl,0x9
004010C8  |. |75 08         |jnz short crackme1.004010D2
004010CA  |. |42            |inc edx                                        ;  Case 9 of switch 0040105D
004010CB  |. |3C 52         |cmp al,0x52                                    ;  != R
004010CD  |.^ 75 88         |jnz short crackme1.00401057
004010CF  |. |4A            |dec edx
004010D0  |.^\EB 85         \jmp short crackme1.00401057
004010D2  |>  42            inc edx                                         ;  Default case of switch 0040105D
004010D3  |.  3C 32         cmp al,0x32                                     ;  = 2
004010D5  |.  74 01         je short crackme1.004010D8
004010D7  |.  4A            dec edx
004010D8  |>  83FA 0A       cmp edx,0xA

所以最终答案为: HlVf3z8MS2 (其中一个)
验证无误~

 
 
本节高手录制的视频,点击前往查看

 
 
 
使用的工具连接(工具有点多有点大,可以先下OD,其它的后面慢慢下) 点击前往下载

下面是我的OD的界面布局,我觉得这4个是最常用的界面,其它的我基本上没用到~