-
-
[求助]请问大牛这个是vmp的壳吗？oep在哪？如何脱？
-
发表于: 2014-2-11 20:07
-
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
0047EAAF 55 push ebp ; OEP 0047EAB0 8BEC mov ebp,esp 0047EAB2 6A FF push -0x1 0047EAB4 68 68DA5000 push 1.0050DA68 0047EAB9 68 54154800 push 1.00481554 0047EABE 64:A1 00000000 mov eax,dword ptr fs:[0] 0047EAC4 50 push eax 0047EAC5 64:8925 0000000>mov dword ptr fs:[0],esp 0047EACC 83EC 58 sub esp,0x58 0047EACF 53 push ebx 0047EAD0 56 push esi 0047EAD1 57 push edi 0047EAD2 8965 E8 mov dword ptr ss:[ebp-0x18],esp 0047EAD5 E8 AAC01D00 call 1.0065AB84 0047EADA D7 xlat byte ptr ds:[xbx+al] 0047EADB 33D2 xor edx,edx 0047EADD 8AD4 mov dl,ah 0047EADF 8915 FC2A5600 mov dword ptr ds:[0x562AFC],edx 0047EAE5 8BC8 mov ecx,eax 0047EAE7 81E1 FF000000 and ecx,0xFF 0047EAED 890D F82A5600 mov dword ptr ds:[0x562AF8],ecx 程序有后门，使用需谨慎！ hxxp://rghost.net/52673121 
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
