* Possible StringData Ref from Data Obj ->"错误：未检测到加密狗，请与软件销售商联系"
|
:0040106B 68A0604000 push 004060A0
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:00401070 E8171F0000 Call 00402F8C
:00401075 6AFF push FFFFFFFF
:00401077 FFD5 call ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401065(C)
|
:00401079 8D442408 lea eax, dword ptr [esp+08]
:0040107D 50 push eax
:0040107E 68876BF39B push 9BF36B87
:00401083 6A01 push 00000001
* Reference To: Rockey2.RY2_Open, Ord:0004h
|
:00401085 E8D4230000 Call 0040345E
:0040108A 8BF0 mov esi, eax
:0040108C 85F6 test esi, esi
:0040108E 7D12 jge 004010A2
:00401090 6A00 push 00000000
:00401092 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"错误：检测加密狗失败，请与软件销售商联系"
|
:00401094 6874604000 push 00406074
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:00401099 E8EE1E0000 Call 00402F8C
:0040109E 6AFF push FFFFFFFF
:004010A0 FFD5 call ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040108E(C)
|
:004010A2 57 push edi
:004010A3 B980000000 mov ecx, 00000080
:004010A8 33C0 xor eax, eax
:004010AA 8D7C2410 lea edi, dword ptr [esp+10]
:004010AE F3 repz
:004010AF AB stosd
:004010B0 B980000000 mov ecx, 00000080
:004010B5 8DBC2410020000 lea edi, dword ptr [esp+00000210]
:004010BC F3 repz
:004010BD AB stosd
:004010BE 8D4C2410 lea ecx, dword ptr [esp+10]
:004010C2 51 push ecx
:004010C3 6A02 push 00000002
:004010C5 56 push esi
* Reference To: Rockey2.RY2_Read, Ord:0005h
|
:004010C6 E88D230000 Call 00403458
:004010CB 85C0 test eax, eax
:004010CD 7D18 jge 004010E7
:004010CF 56 push esi
* Reference To: Rockey2.RY2_Close, Ord:0000h
|
:004010D0 E87D230000 Call 00403452
:004010D5 6A00 push 00000000
:004010D7 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"错误：读取加密狗错误，请与软件销售商联系"
|
:004010D9 6848604000 push 00406048
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:004010DE E8A91E0000 Call 00402F8C
:004010E3 6AFF push FFFFFFFF
:004010E5 FFD5 call ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004010CD(C)
|
:004010E7 8D942410020000 lea edx, dword ptr [esp+00000210]
:004010EE 52 push edx
:004010EF 6A03 push 00000003
:004010F1 56 push esi
* Reference To: Rockey2.RY2_Read, Ord:0005h
|
:004010F2 E861230000 Call 00403458
:004010F7 85C0 test eax, eax
:004010F9 7D18 jge 00401113
:004010FB 56 push esi
* Reference To: Rockey2.RY2_Close, Ord:0000h
|
:004010FC E851230000 Call 00403452
:00401101 6A00 push 00000000
:00401103 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"错误：读取加密狗错误，请与软件销售商联系"
|
:00401105 6848604000 push 00406048
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:0040110A E87D1E0000 Call 00402F8C
:0040110F 6AFF push FFFFFFFF
:00401111 FFD5 call ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004010F9(C)
|
:00401113 56 push esi
* Reference To: Rockey2.RY2_Close, Ord:0000h
|
:00401114 E839230000 Call 00403452
:00401119 8D7C2410 lea edi, dword ptr [esp+10]
:0040111D 83C9FF or ecx, FFFFFFFF
:00401120 33C0 xor eax, eax
:00401122 F2 repnz
:00401123 AE scasb
:00401124 F7D1 not ecx
:00401126 49 dec ecx
:00401127 5F pop edi
:00401128 83F91D cmp ecx, 0000001D
:0040112B 753E jne 0040116B
:0040112D 53 push ebx
:0040112E 8DB42410020000 lea esi, dword ptr [esp+00000210]
:00401135 8D442410 lea eax, dword ptr [esp+10]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040115B(C)
|
:00401139 8A10 mov dl, byte ptr [eax]
:0040113B 8A1E mov bl, byte ptr [esi]
:0040113D 8ACA mov cl, dl
:0040113F 3AD3 cmp dl, bl
:00401141 751E jne 00401161
:00401143 84C9 test cl, cl
:00401145 7416 je 0040115D
:00401147 8A5001 mov dl, byte ptr [eax+01]
:0040114A 8A5E01 mov bl, byte ptr [esi+01]
:0040114D 8ACA mov cl, dl
:0040114F 3AD3 cmp dl, bl
:00401151 750E jne 00401161
:00401153 83C002 add eax, 00000002
:00401156 83C602 add esi, 00000002
:00401159 84C9 test cl, cl
:0040115B 75DC jne 00401139
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401145(C)
|
:0040115D 33C0 xor eax, eax
:0040115F EB05 jmp 00401166
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401141(C), :00401151(C)
|
:00401161 1BC0 sbb eax, eax
:00401163 83D8FF sbb eax, FFFFFFFF
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040115F(U)
|
:00401166 85C0 test eax, eax
:00401168 5B pop ebx
:00401169 7412 je 0040117D
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040112B(C)
|
:0040116B 6A00 push 00000000
:0040116D 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"错误：软件尚未注册，请与软件销售商联系"
|
:0040116F 6820604000 push 00406020
* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
|
:00401174 E8131E0000 Call 00402F8C
:00401179 6AFF push FFFFFFFF
:0040117B FFD5 call ebp
================================
以上为bat.exe文件中的部分内容
这个Rockey2狗如何破解
[课程]Android-CTF解题方法汇总！
