f8不能步过 call <jmp.&KERNEL32.SetUnhandledExceptio>,这是为什么呀?
xiaozicrackeme.rar
00401508 X>/$ /EB 0B jmp short XiaoZi'C.00401515 //入口代码。
0040150A |. |55 53 45 52 33 32>ascii "USER32.DLL",0
00401515 |> \EB 0D jmp short XiaoZi'C.00401524
00401517 |. 4B 65 72 6E 65 6C>ascii "Kernel32.dll",0
00401524 |> EB 0C jmp short XiaoZi'C.00401532
00401526 |. 4D 65 73 73 61 67>ascii "MessageBoxA",0
00401532 |> EB 11 jmp short XiaoZi'C.00401545
00401534 |. 54 65 72 6D 69 6E>ascii "TerminateProcess"
00401544 |. 00 ascii 0
00401545 |> EB 0C jmp short XiaoZi'C.00401553
00401547 |. 4F 70 65 6E 50 72>ascii "OpenProcess",0
00401553 |> 68 00104000 push XiaoZi'C.00401000 ; /pTopLevelFilter =
XiaoZi'C.00401000
00401558 |. E8 F3000000 call <jmp.&KERNEL32.SetUnhandledExceptio>;
0040155D |. A3 68304000 mov dword ptr ds:[403068],eax
00401562 |. 33C0 xor eax,eax
00401564 C700 01000000 mov dword ptr ds:[eax],1
在00401558 行上按f8,程序就运行起来了(而不是暂停在0040155D 行上),这是为什么?
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)