-
-
[旧帖]
[求助]OEP的问题
0.00雪花
-
发表于:
2010-5-21 00:20
1362
-
如果OEP是call能不能脱壳啊
0042DF8F E8 37B80000 call dnf魔神1.004397CB
0042DF94 ^ E9 16FEFFFF jmp dnf魔神1.0042DDAF
0042DF99 3B0D F0774500 cmp ecx,dword ptr ds:[4577F0]
0042DF9F 75 02 jnz short dnf魔神1.0042DFA3
0042DFA1 F3: prefix rep:
0042DFA2 C3 retn
0042DFA3 E9 B7B80000 jmp dnf魔神1.0043985F
0042DFA8 6A 00 push 0
0042DFAA FF7424 14 push dword ptr ss:[esp+14]
0042DFAE FF7424 14 push dword ptr ss:[esp+14]
0042DFB2 FF7424 14 push dword ptr ss:[esp+14]
0042DFB6 FF7424 14 push dword ptr ss:[esp+14]
0042DFBA E8 A4B90000 call dnf魔神1.00439963
0042DFBF 83C4 14 add esp,14
0042DFC2 C3 retn
0042DFC3 6A 0A push 0A
0042DFC5 6A 00 push 0
0042DFC7 FF7424 0C push dword ptr ss:[esp+C]
0042DFCB E8 20DDFFFF call dnf魔神1.0042BCF0
0042DFD0 83C4 0C add esp,0C
就像这样
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)