统计分析攻击实力

《统计分析攻击实力》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、目标保护方法：代码与数据结合，把用户输入作为key对已加密的代码进行解码，如果key正确，则解出正确代码，提示成功，否则解出错误代码，程序由ErrorHandler结束或者直接崩掉。(我最先是在论坛出版的《软件加密技术内幕》一书中学到这一方法)关键代码如下：代码:0040103A.B970000000movecx,700040103F.BE4C104000movesi,0040104C00401044>3006xorbyteptr[esi],al00401046.49dececx00401047.E303jecxzshor

2、t0040104C00401049.46incesi0040104A.^EBF8jmpshort004010440040104C>DC37fdivqwordptr[edi]0040104E.7179jnoshort004010C900401050.57pushedi00401051.56pushesi00401052.67:6Foutsdx,dwordptres:[di]00401054.6Eoutsdx,byteptres:[edi]00401055.66:5Fpopdi00401057.52pushedx0040105

3、8.16pushss00401059.37aaa0040105A.37aaa0040105B.5Fpopedi0040105C.17popss0040105D.7358jnbshort004010B70040105F.59popecx00401060.5Fpopedi00401061.60pushad00401062.52pushedx00401063.5Bpopebx00401064.5Bpopebx00401065.BCF35F4416movesp,16445FF30040106A.37aaa0040106B.37aa

4、a0040106C.5Fpopedi0040106D.52pushedx0040106E.17popss0040106F.47incedi00401070.5Bpopebx00401071.5Fpopedi00401072.17popss00401073.53pushebx00401074.58popeax00401075.59popecx00401076.5Fpopedi00401077.42incedx00401078.104152adcbyteptr[ecx+52],al0040107B.5Fpopedi004010

5、7C.59popecx0040107D.17popss0040107E.4Edecesi0040107F.58popeax00401080.5Fpopedi00401081.50pusheax00401082.42incedx00401083.5Cpopesp00401084.56pushesi00401085.5Fpopedi00401086.5Bpopebx00401087.17popss00401088.53pushebx00401089.58popeax0040108A.5Fpopedi0040108B.16pus

6、hss0040108C.43incebx0040108D.52pushedx0040108E.5Bpopebx0040108F.5Fpopedi00401090.5Apopedx00401091.56pushesi00401092.45incebp00401093.43incebx00401094.5Fpopedi00401095.44incesp00401096.58popeax00401097.17popss00401098.44incesp00401099.5Fpopedi0040109A.56pushesi0040

7、109B.45incebp0040109C.52pushedx0040109D.17popss0040109E.5Fpopedi0040109F.4Edecesi004010A0.58popeax004010A1.42incedx004010A2.17popss004010A3.BCEB5D7767movesp,67775DEB004010A8.64:5Dpopebp004010AA.37aaa004010AB.C8227B17enter7B22,17004010AF.7737jashort004010E8004010B1

8、.B4F3movah,0F3004010B3.0BDCorebx,esp004010B5.37aaa004010B6.57pushedi004010B7>56pushesi004010B8.51pushecx004010B9.6Eoutsdx,byteptres:[edi]004010BA.51push