Several ideas for enhancing Delphi Program security and improving anti-cracking capabilities

Today, "cracking" is widely used as a developer. Due to its special implementation, the method of cracking is quite different from that of MFC. However, after Dede emerged, DelphiProgramIt is easy to crack. In combination with my experience in development and cracking, I will provide several ideas for improving anti-cracking capabilities. please correct me.

1. Do not use Plaintext comparison.

If the following code is used in a program:Code:

If edt_serialno.text = '000000' then... else showmessage ("Serial No error !");

You can directly use the Disassembly tool to see the registration code (serial number). Therefore, you cannot use the clear code. It must be calculated in a series.

2. for the Dede search process/function entry function, "confuse" the program to be released --- change btnregister name to cmp_20040101. This name has no meaning, add several similar controls to the screen.

3. for Dede's reference to the function addresses in BPL packages, for key programs, such as controlling registered programs (a machine is often used to manage and register in the distributed database management system most widely used in Delphi ). do not include the runtime package. in addition, you can save the VCL source code to the project directory and make some modifications as appropriate (adjust the reference address and call code ).

4. multiple functions can be called to determine the password, Especially strings as parameters. different from C/C ++, Delphi only keeps one address pointer in the stack. The Global string is different from the local method, and each call has a function/process, the pointer refers to one layer. without him, it increases the complexity of dynamic debugging.

5. if it is a server program (registration part of the distributed database management system), try to make it a system service. it is restricted to use under 98 (it is easier to crack under 98). When the registration is incorrect, the server does not report an error, but does not provide client services.