|
|
|
Armadillo 工具包,方便收藏!
2006-07-20 13:46 6,385 armadillodumpers_ARTeam.rar 2006-07-20 13:45 17,730 ArmadilloFindProtected13.zip Armadillo_ArmInline_0[1].95.zip 只有3个有用收藏其他的干啥 |
|
[转帖]Anti-Debugging & Software Protection Advice
what an old story |
|
[原创]瓦解PELock 1.0x -> Bartosz Wojcik秀
这么修复很慢, 克隆一份代码patch CRC那里,然后可以直接修改patch IAT。 并且试试delphi程序,有个表被抽走了。 给你个参考代码,写得很乱: ; clone decoder to fuck crc pusha mov ebx, s_size[ebp] push 4 push 3000h push ebx push 0 callX VirtualAlloc mov s_clone[ebp], eax xchg edi, eax mov esi, s_start[ebp] xchg ecx, ebx rep movsb popa ; find CRC patch ; 00374351 2B848D 143B0000 SUB EAX, [EBP+ECX*4+3B14] ; 2B 84 8D 14 3B 00 00 .while b [eax] != 2Bh || \ d [eax+1] != 3B148D84h || \ w [eax+5] != 0 inc eax .endw ; save the addr to decide is last exception mov iatproc[ebp], eax ; patch CRC add eax, 3 mov ecx, s_clone[ebp] sub ecx, s_start[ebp] add ecx, [eax] mov [eax], ecx ; patch IAT encrypt ; 00374661 8919 MOV [ECX], EBX ; 00374663 EB 03 JMP SHORT 00374668 ; 8919EB03 .while d [eax] != 03EB1989h inc eax .endw inc eax mov b [eax], 01h ; mov [ecx], eax ; wait alloc mem to fuck Codereplace mov eax, za[ebp] call _bp |
|
请教PESpin 1.3 -> cyberbob的壳怎么脱呀?急..在线等.谢谢
慢慢等,明年我帮你脱。 |
|
|
|
|
|
求助,变形引擎EXE
http://vx.netlux.org/ |
|
ARTeam: Improving the HideDebugger function v10 by Shub-Nigurrath
ppl=people ot=out? |
|
ARTeam: Improving the HideDebugger function v10 by Shub-Nigurrath
anyway it's a nice tut in my opinion gkend thinks YOU DID A REPEATED WORK AT ALL and he suggests to find a new idea but not make a new code based on an old idea.can you understand it? |
|
奇怪的[DBPE 2.x -> Ding Boy]壳,大侠们指教!
用romra看看 |
|
[转帖]ARTeam: ASProtect_SKE_Unpacking_Approach_by_deroko.rar
mobai,too @______________________@ |
|
|
|
经常见的thunk的解释
thunk的意思应是指“代码中的地址” i.e. mov eax, [401000h] 机器码 A1 00104000 地址为A的话A+1这个地址应该就是thunk 怎么翻译才能体现出这个意思呢? 我不知道,别问我。 |
|
batch病毒之一
妙,不过翻译似乎太随意?不太符合原文地说 |
|
[求助]菜鸟的菜菜问:花指令的英文怎么说
干扰代码 obfuscating code 花指令 junk instruction 偶算不算权威?-_____________________________-; |
|
一个游戏修改器源代码
恨cpp,我的asm你在哪 |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值