北京理工大学信息安全与对抗竞赛---crackme01分析
只是从crackme的情况来看，这次的题目没有成信院的难。
首先，E-Debug Events找到按钮事件。
1 004010A1 /. 55 push ebp 2 004010A2 |. 8BEC mov ebp, esp 3 004010A4 |. 81EC 08000000 sub esp, 8 4 004010AA |. 6A FF push -1 5 004010AC |. 6A 08 push 8 6 004010AE |. 68 02000116 push 16010002 7 004010B3 |. 68 01000152 push 52010001 8 004010B8 |. E8 00010000 call 004011BD ; 获取用户输入的注册码 9 004010BD |. 83C4 10 add esp, 10 10 004010C0 |. 8945 FC mov dword ptr [ebp-4], eax 11 004010C3 |. 68 4C9B4600 push 00469B4C ; ASCII "Manson" 12 004010C8 |. FF75 FC push dword ptr [ebp-4] ; 假码入栈 13 004010CB |. E8 34FFFFFF call 00401004 ; 比较 14 004010D0 |. 83C4 08 add esp, 8 15 004010D3 |. 83F8 00 cmp eax, 0 ; 结果 16 004010D6 |. B8 00000000 mov eax, 0 17 004010DB |. 0F94C0 sete al 18 004010DE |. 8945 F8 mov dword ptr [ebp-8], eax ; 比较结果放入某个位置 19 004010E1 |. 8B5D FC mov ebx, dword ptr [ebp-4] 20 004010E4 |. 85DB test ebx, ebx 21 004010E6 |. 74 09 je short 004010F1 22 004010E8 |. 53 push ebx 23 004010E9 |. E8 C9000000 call 004011B7 24 004010EE |. 83C4 04 add esp, 4 25 004010F1 |> 837D F8 00 cmp dword ptr [ebp-8], 0 26 004010F5 |. 0F84 35000000 je 00401130 ; 关键跳 27 004010FB |. 6A 00 push 0 28 004010FD |. 6A 00 push 0 29 004010FF |. 6A 00 push 0 30 00401101 |. 68 01030080 push 80000301 31 00401106 |. 6A 00 push 0 32 00401108 |. 68 00000000 push 0 33 0040110D |. 68 04000080 push 80000004 34 00401112 |. 6A 00 push 0 35 00401114 |. 68 539B4600 push 00469B53 36 00401119 |. 68 03000000 push 3 37 0040111E |. BB 00134000 mov ebx, 00401300 38 00401123 |. E8 89000000 call 004011B1 39 00401128 |. 83C4 28 add esp, 28 40 0040112B |. E9 30000000 jmp 00401160 41 00401130 |> 6A 00 push 0 42 00401132 |. 6A 00 push 0 43 00401134 |. 6A 00 push 0 44 00401136 |. 68 01030080 push 80000301 45 0040113B |. 6A 00 push 0 46 0040113D |. 68 10000000 push 10 47 00401142 |. 68 04000080 push 80000004 48 00401147 |. 6A 00 push 0 49 00401149 |. 68 5C9B4600 push 00469B5C 50 0040114E |. 68 03000000 push 3 51 00401153 |. BB 00134000 mov ebx, 00401300 52 00401158 |. E8 54000000 call 004011B1 53 0040115D |. 83C4 28 add esp, 28 54 00401160 |> 8BE5 mov esp, ebp 55 00401162 |. 5D pop ebp 56 00401163 \. C3 retn
直接就是明码比较，所以很简单。
