-
-
[求助]有大牛帮我辨认一下这是什么壳吗？
-
发表于: 2010-11-10 11:55
-
用查壳工具。看到的是未知壳
00CAD000 > 83EC 04 SUB ESP,4
00CAD003 50 PUSH EAX
00CAD004 53 PUSH EBX
00CAD005 E8 01000000 CALL ShellCli.00CAD00B
00CAD00A CC INT3
00CAD00B 58 POP EAX
00CAD00C 89C3 MOV EBX,EAX
00CAD00E 40 INC EAX
00CAD00F 2D 00101500 SUB EAX,151000
00CAD014 2D EF196000 SUB EAX,ShellCli.006019EF
00CAD019 05 E4196000 ADD EAX,ShellCli.006019E4
00CAD01E 803B CC CMP BYTE PTR DS:[EBX],0CC
00CAD021 75 19 JNZ SHORT ShellCli.00CAD03C
00CAD023 C603 00 MOV BYTE PTR DS:[EBX],0
00CAD026 BB 00100000 MOV EBX,1000
00CAD02B 68 BE70B05D PUSH 5DB070BE
00CAD030 68 D3571E11 PUSH 111E57D3
00CAD035 53 PUSH EBX
00CAD036 50 PUSH EAX
00CAD037 E8 0A000000 CALL ShellCli.00CAD046
00CAD03C 83C0 00 ADD EAX,0
00CAD03F 894424 08 MOV DWORD PTR SS:[ESP+8],EAX
00CAD043 5B POP EBX
00CAD044 58 POP EAX
00CAD045 C3 RETN
00CAD000 > 83EC 04 SUB ESP,4
00CAD003 50 PUSH EAX
00CAD004 53 PUSH EBX
00CAD005 E8 01000000 CALL ShellCli.00CAD00B
00CAD00A CC INT3
00CAD00B 58 POP EAX
00CAD00C 89C3 MOV EBX,EAX
00CAD00E 40 INC EAX
00CAD00F 2D 00101500 SUB EAX,151000
00CAD014 2D EF196000 SUB EAX,ShellCli.006019EF
00CAD019 05 E4196000 ADD EAX,ShellCli.006019E4
00CAD01E 803B CC CMP BYTE PTR DS:[EBX],0CC
00CAD021 75 19 JNZ SHORT ShellCli.00CAD03C
00CAD023 C603 00 MOV BYTE PTR DS:[EBX],0
00CAD026 BB 00100000 MOV EBX,1000
00CAD02B 68 BE70B05D PUSH 5DB070BE
00CAD030 68 D3571E11 PUSH 111E57D3
00CAD035 53 PUSH EBX
00CAD036 50 PUSH EAX
00CAD037 E8 0A000000 CALL ShellCli.00CAD046
00CAD03C 83C0 00 ADD EAX,0
00CAD03F 894424 08 MOV DWORD PTR SS:[ESP+8],EAX
00CAD043 5B POP EBX
00CAD044 58 POP EAX
00CAD045 C3 RETN
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
