赛孚耐3.1版狗的DLL文件:
请高手分析一下加密思路
004C1CA0 55 push ebp
004C1CA1 8BEC mov ebp,esp
004C1CA3 83EC 54 sub esp,54
004C1CA6 53 push ebx
004C1CA7 56 push esi
004C1CA8 57 push edi
004C1CA9 8D7D AC lea edi,dword ptr ss:[ebp-54]
004C1CAC B9 15000000 mov ecx,15
004C1CB1 B8 CCCCCCCC mov eax,CCCCCCCC
004C1CB6 F3:AB rep stos dword ptr es:[edi]
004C1CB8 C745 FC 00000000 mov dword ptr ss:[ebp-4],0
004C1CBF C745 F8 00000000 mov dword ptr ss:[ebp-8],0
004C1CC6 C745 F4 00000000 mov dword ptr ss:[ebp-C],0
004C1CCD 8D45 FC lea eax,dword ptr ss:[ebp-4]
004C1CD0 8945 F0 mov dword ptr ss:[ebp-10],eax
004C1CD3 833D 20674D00 00 cmp dword ptr ds:[4D6720],0
004C1CDA 75 05 jnz short DogLicen.004C1CE1
004C1CDC 83C8 FF or eax,FFFFFFFF
004C1CDF EB 53 jmp short DogLicen.004C1D34
004C1CE1 8BF4 mov esi,esp
004C1CE3 8B4D F0 mov ecx,dword ptr ss:[ebp-10]
004C1CE6 51 push ecx
004C1CE7 8B55 F4 mov edx,dword ptr ss:[ebp-C]
004C1CEA 52 push edx
004C1CEB 8B45 F8 mov eax,dword ptr ss:[ebp-8]
004C1CEE 50 push eax
004C1CEF FF15 20674D00 call dword ptr ds:[4D6720] ; win32dll.DogRead
004C1CF5 3BF4 cmp esi,esp
004C1CF7 E8 A8090000 call <jmp.&MSVCRTD._chkesp>
004C1CFC 8945 EC mov dword ptr ss:[ebp-14],eax
004C1CFF 837D EC 00 cmp dword ptr ss:[ebp-14],0
004C1D03 75 14 jnz short DogLicen.004C1D19
004C1D05 817D FC 743C0300 cmp dword ptr ss:[ebp-4],33C74 ; 比较软件狗版本
004C1D0C > 75 04 jnz short DogLicen.004C1D12
004C1D0E 33C0 xor eax,eax
004C1D10 EB 22 jmp short DogLicen.004C1D34
004C1D12 E8 59000000 call DogLicen.004C1D70 ; 软件狗版本不对
004C1D17 EB 13 jmp short DogLicen.004C1D2C
004C1D19 6A 00 push 0
004C1D1B 6A 00 push 0
004C1D1D 68 C8504D00 push DogLicen.004D50C8
004C1D22 E8 65090000 call <jmp.&MFC42D.#1136> ; 请确认软件狗插好
004C1D27 83C8 FF or eax,FFFFFFFF
004C1D2A EB 08 jmp short DogLicen.004C1D34
004C1D2C E8 3F000000 call DogLicen.004C1D70
004C1D31 83C8 FF or eax,FFFFFFFF
004C1D34 5F pop edi
004C1D35 5E pop esi
004C1D36 5B pop ebx
004C1D37 83C4 54 add esp,54
004C1D3A 3BEC cmp ebp,esp
004C1D3C E8 63090000 call <jmp.&MSVCRTD._chkesp>
004C1D41 8BE5 mov esp,ebp
004C1D43 5D pop ebp
004C1D44 C3 retn
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课