- UID
- 20138
注册时间2006-8-9
阅读权限20
最后登录1970-1-1
以武会友
该用户从未签到
|
我是一个初学者,偿试解加密狗程序,这是不是一段读和分析加密狗的代码,下面这段代码,我折腾了好几天了,还是弄不懂
* Referenced by a CALL at Addresses:
|:00404AC1 , :0040B6C8 , :0040B6F8
|
:00408800 64A100000000 mov eax, dword ptr fs:[00000000]
:00408806 6AFF push FFFFFFFF
:00408808 6800044200 push 00420400
:0040880D 50 push eax
:0040880E 64892500000000 mov dword ptr fs:[00000000], esp
:00408815 83EC08 sub esp, 00000008
:00408818 56 push esi
:00408819 8DB1C4000000 lea esi, dword ptr [ecx+000000C4]
:0040881F 56 push esi
:00408820 E81BC80000 call 00415040
:00408825 83C404 add esp, 00000004
:00408828 83F80E cmp eax, 0000000E
:0040882B 7535 jne 00408862
:0040882D 8D4C2404 lea ecx, dword ptr [esp+04]
* Reference To: MFC42.Ordinal:021C, Ord:021Ch
|
:00408831 E8AECD0000 Call 004155E4
* Possible Reference to String Resource ID=00130: "Installed Protection Driver!"
|
:00408836 6882000000 push 00000082
:0040883B 8D4C2408 lea ecx, dword ptr [esp+08]
:0040883F C744241800000000 mov [esp+18], 00000000
* Reference To: MFC42.Ordinal:1040, Ord:1040h
|
:00408847 E8F6CF0000 Call 00415842
:0040884C 8B442404 mov eax, dword ptr [esp+04]
:00408850 6A00 push 00000000
:00408852 6A00 push 00000000
:00408854 50 push eax
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:00408855 E8C4CF0000 Call 0041581E
:0040885A 6A01 push 00000001
* Reference To: MSVCRT.exit, Ord:0249h
|
:0040885C FF15F0264200 Call dword ptr [004226F0]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040882B(C)
|
:00408862 F60614 test byte ptr [esi], 14
:00408865 7535 jne 0040889C
:00408867 8D4C2408 lea ecx, dword ptr [esp+08]
* Reference To: MFC42.Ordinal:021C, Ord:021Ch
|
:0040886B E874CD0000 Call 004155E4
* Possible Reference to String Resource ID=00131: "Keys DIG3PLUS or DIG3+UPGRADE
ot found?"
|
:00408870 6883000000 push 00000083
:00408875 8D4C240C lea ecx, dword ptr [esp+0C]
:00408879 C744241801000000 mov [esp+18], 00000001
谢谢 |
|