|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
程序脱壳修复了，还是不能运行，但没有提示，有欲启动而又退出趋势。分析应该是程序有自效验。OD载入如下： OD提示：【程序已中止，退出代码】
7C92EB94 > C3 RETN 7C92EB95 8DA424 00000000 LEA ESP,DWORD PTR SS:[ESP] 7C92EB9C 8D6424 00 LEA ESP,DWORD PTR SS:[ESP] 7C92EBA0 90 NOP 7C92EBA1 90 NOP 7C92EBA2 90 NOP 7C92EBA3 90 NOP 7C92EBA4 90 NOP 7C92EBA5 > 8D5424 08 LEA EDX,DWORD PTR SS:[ESP+8] 7C92EBA9 CD 2E INT 2E 7C92EBAB C3 RETN 7C92EBAC > 55 PUSH EBP 7C92EBAD 8BEC MOV EBP,ESP 7C92EBAF 9C PUSHFD 7C92EBB0 81EC D0020000 SUB ESP,2D0 7C92EBB6 8985 DCFDFFFF MOV DWORD PTR SS:[EBP-224],EAX 7C92EBBC 898D D8FDFFFF MOV DWORD PTR SS:[EBP-228],ECX 7C92EBC2 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 7C92EBC5 8B4D 04 MOV ECX,DWORD PTR SS:[EBP+4] 7C92EBC8 8948 0C MOV DWORD PTR DS:[EAX+C],ECX 7C92EBCB 8D85 2CFDFFFF LEA EAX,DWORD PTR SS:[EBP-2D4] 7C92EBD1 8988 B8000000 MOV DWORD PTR DS:[EAX+B8],ECX 7C92EBD7 8998 A4000000 MOV DWORD PTR DS:[EAX+A4],EBX 7C92EBDD 8990 A8000000 MOV DWORD PTR DS:[EAX+A8],EDX 7C92EBE3 89B0 A0000000 MOV DWORD PTR DS:[EAX+A0],ESI 7C92EBE9 89B8 9C000000 MOV DWORD PTR DS:[EAX+9C],EDI 7C92EBEF 8D4D 0C LEA ECX,DWORD PTR SS:[EBP+C] 7C92EBF2 8988 C4000000 MOV DWORD PTR DS:[EAX+C4],ECX 小弟初学解密，不知道这是自效验还是------？？？还望大侠们多多点拨为谢！  
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 好贴收藏
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
