-
-
[旧帖] [求助]hardware key not found, 0.00雪花
-
发表于: 2009-11-2 22:47 10948
-
sentinel hardware key的狗已经碰到了两只,都没有打掉,如下:
00627000 /$ A0 68226100 mov al,byte ptr ds:[612268]
00627005 |. 84C0 test al,al
00627007 |. 74 07 je short TEST.00627010
00627009 |. 800D 18276100 01 or byte ptr ds:[612718],1
00627010 |> A1 40226100 mov eax,dword ptr ds:[612240]
00627015 |. 85C0 test eax,eax
00627017 |. 74 07 je short TEST.00627020
00627019 |. 800D 18276100 08 or byte ptr ds:[612718],8
00627020 |> 8A0D 18276100 mov cl,byte ptr ds:[612718]
00627026 |. 84C9 test cl,cl
00627028 |. 74 3C je short TEST.00627066
0062702A |. 8B15 00126200 mov edx,dword ptr ds:[621200]
00627030 |. 52 push edx ; /Arg10 => 00000000
00627031 |. 8B15 4C226100 mov edx,dword ptr ds:[61224C] ; |
00627037 |. 51 push ecx ; |Arg9
00627038 |. 8B0D 50226100 mov ecx,dword ptr ds:[612250] ; |
0062703E |. 68 C0246100 push TEST.006124C0 ; |Arg8 = 006124C0
00627043 |. 68 68226100 push TEST.00612268 ; |Arg7 = 00612268
00627048 |. 51 push ecx ; |Arg6 => 00000000
00627049 |. 8B0D 48226100 mov ecx,dword ptr ds:[612248] ; |
0062704F |. 52 push edx ; |Arg5 => 00000000
00627050 |. 8B15 44226100 mov edx,dword ptr ds:[612244] ; |
00627056 |. 51 push ecx ; |Arg4 => 00000000
00627057 |. 52 push edx ; |Arg3 => 00000000
00627058 |. 50 push eax ; |Arg2
00627059 |. 68 38226100 push TEST.00612238 ; |Arg1 = 00612238
0062705E |. E8 5D1F0000 call TEST.00628FC0 ; \BETEM.00628FC0
00627063 |. 83C4 28 add esp,28
00627066 \> C3 retn
00627067 90 nop
00627068 90 nop
00627069 90 nop
0062706A 90 nop
0062706B 90 nop
0062706C 90 nop
0062706D 90 nop
0062706E 90 nop
0062706F 90 nop
00627070 /$ 8B15 F8126200 mov edx,dword ptr ds:[6212F8]
00627076 |. 83FA 01 cmp edx,1
00627079 |. 75 10 jnz short TEST.0062708B
0062707B |. 68 2C136200 push TEST.0062132C
00627080 |. E8 7B240000 call TEST.00629500
00627085 |. 8B15 F8126200 mov edx,dword ptr ds:[6212F8]
0062708B |> 8D82 7B56D14E lea eax,dword ptr ds:[edx+4ED1567B]
00627091 |. 8D1492 lea edx,dword ptr ds:[edx+edx*4]
00627094 |. 56 push esi
00627095 |. 57 push edi
00627096 |. BE 14126200 mov esi,TEST.00621214 ; ASCII "Hardware key not found."
0062709B |. 33C9 xor ecx,ecx
0062709D |. 8D3C92 lea edi,dword ptr ds:[edx+edx*4]
006270A0 |> 8BD0 /mov edx,eax
006270A2 |. 69C0 1D410310 |imul eax,eax,1003411D
006270A8 |. C1EA 09 |shr edx,9
006270AB |. 81C2 9310D179 |add edx,79D11093
006270B1 |. 33C2 |xor eax,edx
006270B3 |. 8A94F9 52366100 |mov dl,byte ptr ds:[ecx+edi*8+613652]
006270BA |. 32D0 |xor dl,al
006270BC |. 8816 |mov byte ptr ds:[esi],dl
006270BE |. 46 |inc esi
006270BF |. 41 |inc ecx
006270C0 |. 81F9 C8000000 |cmp ecx,0C8
006270C6 |.^ 7C D8 \jl short TEST.006270A0
006270C8 |. C606 00 mov byte ptr ds:[esi],0
006270CB |. 5F pop edi
006270CC |. B8 14126200 mov eax,TEST.00621214 ; ASCII "Hardware key not found."
006270D1 |. 5E pop esi
006270D2 \. C3 retn
006270D3 90 nop
想请熟悉的兄弟给指点一下
00627000 /$ A0 68226100 mov al,byte ptr ds:[612268]
00627005 |. 84C0 test al,al
00627007 |. 74 07 je short TEST.00627010
00627009 |. 800D 18276100 01 or byte ptr ds:[612718],1
00627010 |> A1 40226100 mov eax,dword ptr ds:[612240]
00627015 |. 85C0 test eax,eax
00627017 |. 74 07 je short TEST.00627020
00627019 |. 800D 18276100 08 or byte ptr ds:[612718],8
00627020 |> 8A0D 18276100 mov cl,byte ptr ds:[612718]
00627026 |. 84C9 test cl,cl
00627028 |. 74 3C je short TEST.00627066
0062702A |. 8B15 00126200 mov edx,dword ptr ds:[621200]
00627030 |. 52 push edx ; /Arg10 => 00000000
00627031 |. 8B15 4C226100 mov edx,dword ptr ds:[61224C] ; |
00627037 |. 51 push ecx ; |Arg9
00627038 |. 8B0D 50226100 mov ecx,dword ptr ds:[612250] ; |
0062703E |. 68 C0246100 push TEST.006124C0 ; |Arg8 = 006124C0
00627043 |. 68 68226100 push TEST.00612268 ; |Arg7 = 00612268
00627048 |. 51 push ecx ; |Arg6 => 00000000
00627049 |. 8B0D 48226100 mov ecx,dword ptr ds:[612248] ; |
0062704F |. 52 push edx ; |Arg5 => 00000000
00627050 |. 8B15 44226100 mov edx,dword ptr ds:[612244] ; |
00627056 |. 51 push ecx ; |Arg4 => 00000000
00627057 |. 52 push edx ; |Arg3 => 00000000
00627058 |. 50 push eax ; |Arg2
00627059 |. 68 38226100 push TEST.00612238 ; |Arg1 = 00612238
0062705E |. E8 5D1F0000 call TEST.00628FC0 ; \BETEM.00628FC0
00627063 |. 83C4 28 add esp,28
00627066 \> C3 retn
00627067 90 nop
00627068 90 nop
00627069 90 nop
0062706A 90 nop
0062706B 90 nop
0062706C 90 nop
0062706D 90 nop
0062706E 90 nop
0062706F 90 nop
00627070 /$ 8B15 F8126200 mov edx,dword ptr ds:[6212F8]
00627076 |. 83FA 01 cmp edx,1
00627079 |. 75 10 jnz short TEST.0062708B
0062707B |. 68 2C136200 push TEST.0062132C
00627080 |. E8 7B240000 call TEST.00629500
00627085 |. 8B15 F8126200 mov edx,dword ptr ds:[6212F8]
0062708B |> 8D82 7B56D14E lea eax,dword ptr ds:[edx+4ED1567B]
00627091 |. 8D1492 lea edx,dword ptr ds:[edx+edx*4]
00627094 |. 56 push esi
00627095 |. 57 push edi
00627096 |. BE 14126200 mov esi,TEST.00621214 ; ASCII "Hardware key not found."
0062709B |. 33C9 xor ecx,ecx
0062709D |. 8D3C92 lea edi,dword ptr ds:[edx+edx*4]
006270A0 |> 8BD0 /mov edx,eax
006270A2 |. 69C0 1D410310 |imul eax,eax,1003411D
006270A8 |. C1EA 09 |shr edx,9
006270AB |. 81C2 9310D179 |add edx,79D11093
006270B1 |. 33C2 |xor eax,edx
006270B3 |. 8A94F9 52366100 |mov dl,byte ptr ds:[ecx+edi*8+613652]
006270BA |. 32D0 |xor dl,al
006270BC |. 8816 |mov byte ptr ds:[esi],dl
006270BE |. 46 |inc esi
006270BF |. 41 |inc ecx
006270C0 |. 81F9 C8000000 |cmp ecx,0C8
006270C6 |.^ 7C D8 \jl short TEST.006270A0
006270C8 |. C606 00 mov byte ptr ds:[esi],0
006270CB |. 5F pop edi
006270CC |. B8 14126200 mov eax,TEST.00621214 ; ASCII "Hardware key not found."
006270D1 |. 5E pop esi
006270D2 \. C3 retn
006270D3 90 nop
想请熟悉的兄弟给指点一下
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!
赞赏
他的文章
- [讨论]是crypkey的新版本吗? 17966
- 如何把灰色按钮变成可用 13600
- [求助]hardware key not found, 10949
- [求助]OD反编译flexlm的vendor daemon?? 8100
- [求助]想知道WKPE抓取的.kpe文件可以转换到XP下面来吗? 4789
看原图
赞赏
雪币:
留言: