00472000 > /EB 20 jmp short 00472022
00472002 |0000 add [eax], al
00472004 |40 inc eax
00472005 |0000 add [eax], al
00472007 |0040 00 add [eax], al
0047200A |0000 add [eax], al
0047200C |0000 add [eax], al
0047200E |0000 add [eax], al
00472010 |0020 add [eax], ah
00472012 |07 pop es
00472013 |000B add [ebx], cl
00472015 |0000 add [eax], al
00472017 |0002 add [edx], al
00472019 |3000 xor [eax], al
0047201B |0000 add [eax], al
0047201D |0000 add [eax], al
0047201F |0000 add [eax], al
用peid看是DBPE 2.x -> Ding Boy
可是用脱这种壳的方法好像不行!
郁闷!
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
