请你看到了加一下我的qq好么?下面是pe文件的数据。太大,发不上来附件。
70000000 - 4d - dec ebp
70000001 - 5a - pop edx
70000002 - 90 - nop
70000003 - 00 03 - add [ebx],al
70000005 - 00 00 - add [eax],al
70000007 - 00 04 00 - add [eax+eax],al
7000000A - 00 00 - add [eax],al
7000000C - ff - db ff
7000000D - ff 00 - inc [eax]
7000000F - 00 b8 00 00 00 00 - add [eax+00000000],bh
70000015 - 00 00 - add [eax],al
70000017 - 00 40 00 - add [eax+00],al
7000001A - 00 00 - add [eax],al
7000001C - 00 00 - add [eax],al
7000001E - 00 00 - add [eax],al
70000020 - 00 00 - add [eax],al
70000022 - 00 00 - add [eax],al
70000024 - 42 - inc edx
70000025 - 75 2a - jne 70000051
70000027 - 4f - dec edi
70000028 - 00 00 - add [eax],al
7000002A - 00 00 - add [eax],al
7000002C - 00 00 - add [eax],al
7000002E - 00 00 - add [eax],al
70000030 - 00 00 - add [eax],al
70000032 - 00 00 - add [eax],al
70000034 - 00 00 - add [eax],al
70000036 - 00 00 - add [eax],al
70000038 - 00 00 - add [eax],al
7000003A - 00 00 - add [eax],al
7000003C - 40 - inc eax
7000003D - 01 00 - add [eax],eax
7000003F - 00 0e - add [esi],cl
70000041 - 1f - pop ds
70000042 - ba 0e 00 b4 09 - mov edx,09b4000e
70000047 - cd 21 - int 21
70000049 - b8 01 4c cd 21 - mov eax,21cd4c01
7000004E - 54 - push esp
7000004F - 68 69 73 20 70 - push 70207369
70000054 - 72 6f - jb 700000c5
70000056 - 67 72 61 - jb 700000ba
70000059 - 6d - insd
7000005A - 20 63 61 - and [ebx+61],ah
7000005D - 6e - outsb
7000005E - 6e - outsb
7000005F - 6f - outsd
70000060 - 74 20 - je 70000082
70000062 - 62 65 20 - bound esp,[ebp+20]
70000065 - 72 75 - jb 700000dc
70000067 - 6e - outsb
70000068 - 20 69 6e - and [ecx+6e],ch
7000006B - 20 44 4f 53 - and [edi+ecx*2+53],al
7000006F - 20 6d 6f - and [ebp+6f],ch
70000072 - 64 65 2e 0d 0d 0a 24 00 - or eax,00240a0d
7000007A - 00 00 - add [eax],al
7000007C - 00 00 - add [eax],al
7000007E - 00 00 - add [eax],al
70000080 - 73 dc - jae 7000005e
70000082 - 6b ca 37 - imul ecx,edx,37
70000085 - bd 05 99 37 bd - mov ebp,bd379905
7000008A - 05 99 37 bd 05 - add eax,05bd3799
7000008F - 99 - cdq
70000090 - 31 9e 0e 99 35 bd - xor [esi-42ca66f2],ebx
70000096 - 05 99 24 b5 58 - add eax,58b52499
7000009B - 99 - cdq
7000009C - 35 bd 05 99 cd - xor eax,cd9905bd
700000A1 - 9e - sahf
700000A2 - 1c 99 - sbb al,99
700000A4 - 35 bd 05 99 37 - xor eax,379905bd
700000A9 - bd 05 99 34 bd - mov ebp,bd349905
700000AE - 05 99 6e 9e 16 - add eax,169e6e99
700000B3 - 99 - cdq
700000B4 - 3e bd 05 99 24 b5 - mov ebp,b5249905
700000BA - 6c - insb
700000BB - 99 - cdq
700000BC - 35 bd 05 99 32 - xor eax,329905bd
700000C1 - b1 0a - mov cl,0a
700000C3 - 99 - cdq
700000C4 - 19 bd 05 99 68 9f - sbb [ebp-609766fb],edi
700000CA - 0e - push cs
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课