-
-
[旧帖]
[求助]这是壳还是代码加密?sysanti.exe
0.00雪花
-
发表于:
2009-11-4 16:05
4566
-
[旧帖] [求助]这是壳还是代码加密?sysanti.exe
0.00雪花
原帖http://bbs.pediy.com/showthread.php?t=100559
无奈啊....
CODE:0040A600 33 C0 xor eax, eax
CODE:0040A602 55 push ebp
CODE:0040A603 68 77 BB 40 00 push offset loc_40BB77
CODE:0040A608 64 FF 30 push dword ptr fs:[eax]
CODE:0040A60B 64 89 20 mov fs:[eax], esp
CODE:0040A60E E8 04 00 00 00 call near ptr loc_40A613+4
CODE:0040A613
CODE:0040A613 loc_40A613: ; CODE XREF: start+2Ap
CODE:0040A613 E8 E8 EB 0E 58 call near ptr 584F9200h
CODE:0040A613 start endp
CODE:0040A613
CODE:0040A618 EB 02 jmp short loc_40A61C
CODE:0040A618 ; 哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪?
CODE:0040A61A E8 E8 db 2 dup(0E8h)
CODE:0040A61C ; 哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪哪?
CODE:0040A61C
CODE:0040A61C loc_40A61C: ; CODE XREF: CODE:0040A618j
CODE:0040A61C 83 C0 02 add eax, 2
CODE:0040A61F EB 01 jmp short loc_40A622
od跟到
CODE:0040A60E E8 04 00 00 00 call near ptr loc_40A613+4
然后就**了~~~~
哪个破解高手给解释下
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课