我在跟踪调试一激活程序时,发现程序中间基本上没有什么实用的东西,只有一些DB语句,激活时出错的提示根本找不到,请问这是什么原因?
下面是主要的几个语句,供参考.
00402000 > . 8CD01779 dd mscoree._CorExeMain
00402004 00000000 dd 00000000
00402008 48 db 48 ; CHAR 'H'
00402009 00 db 00
0040200A 00 db 00
0040200B 00 db 00
0040200C 02 db 02
0040200D 00 db 00
0040200E 00 db 00
0040200F 00 db 00
00402010 . 3C 2C 00 ascii "<,",0
00402013 00 db 00
....
004031BF 00 db 00
004031C0 . CA 012E retf 2E01
004031C3 00 db 00
004031C4 . 0B00 or eax, dword ptr [eax]
004031C6 . CA 012E retf 2E01
004031C9 00 db 00
004031CA 13 db 13
004031CB 00 db 00
004031CC . CA 012E retf 2E01
004031CF 00 db 00
004031D0 . 1B00 sbb eax, dword ptr [eax]
004031D2 . CA 012E retf 2E01
004031D5 . 0033 add byte ptr [ebx], dh
004031D7 . 00CA add dl, cl
004031D9 . 012E add dword ptr [esi], ebp
004031DB . 0053 00 add byte ptr [ebx], dl
004031DE . CA 012E retf 2E01
004031E1 . 006B 00 add byte ptr [ebx], ch
004031E4 . D001 rol byte ptr [ecx], 1
004031E6 . 2E:004B 00 add byte ptr cs:[ebx], cl
004031EA . CA 012E retf 2E01
004031ED 00 db 00
004031EE 43 db 43 ; CHAR 'C'
004031EF 00 db 00
004031F0 . CA 012E retf 2E01
004031F3 00 db 00
004031F4 . 5B pop ebx
004031F5 . 00CA add dl, cl
004031F7 . 012E add dword ptr [esi], ebp
004031F9 . 0063 00 add byte ptr [ebx], ah
004031FC . CA 01A0 retf 0A001
004031FF 00 db 00
00403200 E3 db E3
......
00403F8F 00 db 00
00403F90 . B83F0000 dd 00003FB8 ; 结构 'IMAGE_IMPORT_DESCRIPTOR'
00403F94 . 00000000 dd 00000000
00403F98 . 00000000 dd 00000000
00403F9C . CE3F0000 dd 00003FCE
00403FA0 . 00200000 dd 00002000
00403FA4 . 00000000 dd 00000000 ; 结构 'IMAGE_IMPORT_DESCRIPTOR'
00403FA8 . 00000000 dd 00000000
00403FAC . 00000000 dd 00000000
00403FB0 . 00000000 dd 00000000
00403FB4 . 00000000 dd 00000000
00403FB8 . C03F0000 dd 00003FC0 ; 为 'mscoree.dll'导入查找表
00403FBC . 00000000 dd 00000000
00403FC0 . 0000 dw 0000
00403FC2 . 5F 43 6F 72 4>ascii "_CorExeMain",0
00403FCE . 6D 73 63 6F 7>ascii "mscoree.dll",0
00403FDA 00 db 00
00403FDB 00 db 00
00403FDC 00 db 00
00403FDD 00 db 00
00403FDE > $- FF25 00204000 jmp dword ptr [<&mscoree._CorExeMain>; mscoree._CorExeMain
00403FE4 00 db 00
00403FE5 00 db 00
00403FE6 00 db 00
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
