[求助]帮我看看这个壳-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]帮我看看这个壳 0.00雪花

发表于: 2008-2-5 14:35 2971

[旧帖] [求助]帮我看看这个壳 0.00雪花

zhouyur

2008-2-5 14:35

2971

我把可以用的方法都试了怎么就跟不到OEP..有高手的教下兄弟.我QQ59482988
代码没有全部拿过来还有好多
00425C02 > $  E8 36A50000 CALL gektz.0043013D
00425C07 .^ E9 16FEFFFF JMP gektz.00425A22
00425C0C $  55          PUSH EBP
00425C0D .  8BEC       MOV EBP,ESP
00425C0F .  51          PUSH ECX
00425C10 .  53          PUSH EBX
00425C11 .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425C14 .  83C0 0C    ADD EAX,0C
00425C17 .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
00425C1A .  64:8B1D 00000>MOV EBX,DWORD PTR FS:[0]
00425C21 .  8B03       MOV EAX,DWORD PTR DS:[EBX]
00425C23 .  64:A3 0000000>MOV DWORD PTR FS:[0],EAX
00425C29 .  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
00425C2C .  8B5D 0C    MOV EBX,DWORD PTR SS:[EBP+C]
00425C2F .  8B6D FC    MOV EBP,DWORD PTR SS:[EBP-4]
00425C32 .  8B63 FC    MOV ESP,DWORD PTR DS:[EBX-4]
00425C35 .  FFE0       JMP EAX
00425C37 .  5B          POP EBX
00425C38 .  C9          LEAVE
00425C39 .  C2 0800    RETN 8
00425C3C $  58          POP EAX
00425C3D .  59          POP ECX
00425C3E .  870424       XCHG DWORD PTR SS:[ESP],EAX
00425C41 .  FFE0       JMP EAX
00425C43  /$  55          PUSH EBP
00425C44  |.  8BEC       MOV EBP,ESP
00425C46  |.  51          PUSH ECX
00425C47  |.  51          PUSH ECX
00425C48  |.  53          PUSH EBX
00425C49  |.  56          PUSH ESI
00425C4A  |.  57          PUSH EDI
00425C4B  |.  64:8B35 00000>MOV ESI,DWORD PTR FS:[0]
00425C52  |.  8975 FC    MOV DWORD PTR SS:[EBP-4],ESI
00425C55  |.  C745 F8 6C5C4>MOV DWORD PTR SS:[EBP-8],gektz.00425C6C
00425C5C  |.  6A 00       PUSH 0                                  ; /_eax_value = 0
00425C5E  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |pExcptRec
00425C61  |.  FF75 F8    PUSH DWORD PTR SS:[EBP-8]             ; |ReturnAddr
00425C64  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |pRegistrationFrame
00425C67  |.  E8 7E810100 CALL <JMP.&KERNEL32.RtlUnwind>          ; \RtlUnwind
00425C6C  |.  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425C6F  |.  8B40 04    MOV EAX,DWORD PTR DS:[EAX+4]
00425C72  |.  83E0 FD    AND EAX,FFFFFFFD
00425C75  |.  8B4D 0C    MOV ECX,DWORD PTR SS:[EBP+C]
00425C78  |.  8941 04    MOV DWORD PTR DS:[ECX+4],EAX
00425C7B  |.  64:8B3D 00000>MOV EDI,DWORD PTR FS:[0]
00425C82  |.  8B5D FC    MOV EBX,DWORD PTR SS:[EBP-4]
00425C85  |.  893B       MOV DWORD PTR DS:[EBX],EDI
00425C87  |.  64:891D 00000>MOV DWORD PTR FS:[0],EBX
00425C8E  |.  5F          POP EDI
00425C8F  |.  5E          POP ESI
00425C90  |.  5B          POP EBX
00425C91  |.  C9          LEAVE
00425C92  \.  C2 0800    RETN 8
00425C95  />  55          PUSH EBP
00425C96  |.  8BEC       MOV EBP,ESP
00425C98  |.  83EC 08    SUB ESP,8
00425C9B  |.  53          PUSH EBX
00425C9C  |.  56          PUSH ESI
00425C9D  |.  57          PUSH EDI
00425C9E  |.  FC          CLD
00425C9F  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
00425CA2  |.  33C0       XOR EAX,EAX
00425CA4  |.  50          PUSH EAX                               ; /Arg8 => 00000000
00425CA5  |.  50          PUSH EAX                               ; |Arg7 => 00000000
00425CA6  |.  50          PUSH EAX                               ; |Arg6 => 00000000
00425CA7  |.  FF75 FC    PUSH DWORD PTR SS:[EBP-4]             ; |Arg5
00425CAA  |.  FF75 14    PUSH DWORD PTR SS:[EBP+14]             ; |Arg4
00425CAD  |.  FF75 10    PUSH DWORD PTR SS:[EBP+10]             ; |Arg3
00425CB0  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |Arg2
00425CB3  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
00425CB6  |.  E8 CFB00000 CALL gektz.00430D8A                   ; \gektz.00430D8A
00425CBB  |.  83C4 20    ADD ESP,20
00425CBE  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
00425CC1  |.  5F          POP EDI
00425CC2  |.  5E          POP ESI
00425CC3  |.  5B          POP EBX
00425CC4  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
00425CC7  |.  8BE5       MOV ESP,EBP
00425CC9  |.  5D          POP EBP
00425CCA  \.  C3          RETN
00425CCB .  56          PUSH ESI
00425CCC .  FC          CLD
00425CCD .  8B7424 0C    MOV ESI,DWORD PTR SS:[ESP+C]
00425CD1 .  8B4E 08    MOV ECX,DWORD PTR DS:[ESI+8]
00425CD4 .  33CE       XOR ECX,ESI
00425CD6 .  E8 4CDFFFFF CALL gektz.00423C27
00425CDB .  6A 00       PUSH 0                                  ; /Arg8 = 00000000
00425CDD .  56          PUSH ESI                               ; |Arg7
00425CDE .  FF76 14    PUSH DWORD PTR DS:[ESI+14]             ; |Arg6
00425CE1 .  FF76 0C    PUSH DWORD PTR DS:[ESI+C]             ; |Arg5
00425CE4 .  6A 00       PUSH 0                                  ; |Arg4 = 00000000
00425CE6 .  FF7424 24    PUSH DWORD PTR SS:[ESP+24]             ; |Arg3
00425CEA .  FF76 10    PUSH DWORD PTR DS:[ESI+10]             ; |Arg2
00425CED .  FF7424 24    PUSH DWORD PTR SS:[ESP+24]             ; |Arg1
00425CF1 .  E8 94B00000 CALL gektz.00430D8A                   ; \gektz.00430D8A
00425CF6 .  83C4 20    ADD ESP,20
00425CF9 .  5E          POP ESI
00425CFA .  C3          RETN
00425CFB  /$  55          PUSH EBP
00425CFC  |.  8BEC       MOV EBP,ESP
00425CFE  |.  83EC 38    SUB ESP,38
00425D01  |.  53          PUSH EBX
00425D02  |.  817D 08 23010>CMP DWORD PTR SS:[EBP+8],123
00425D09  |.  75 12       JNZ SHORT gektz.00425D1D
00425D0B  |.  B8 A45D4200 MOV EAX,gektz.00425DA4
00425D10  |.  8B4D 0C    MOV ECX,DWORD PTR SS:[EBP+C]
00425D13  |.  8901       MOV DWORD PTR DS:[ECX],EAX
00425D15  |.  33C0       XOR EAX,EAX
00425D17  |.  40          INC EAX
00425D18  |.  E9 B0000000 JMP gektz.00425DCD
00425D1D  |>  8365 D8 00 AND DWORD PTR SS:[EBP-28],0
00425D21  |.  C745 DC D05D4>MOV DWORD PTR SS:[EBP-24],gektz.00425DD0
00425D28  |.  A1 B4244500 MOV EAX,DWORD PTR DS:[4524B4]
00425D2D  |.  8D4D D8    LEA ECX,DWORD PTR SS:[EBP-28]
00425D30  |.  33C1       XOR EAX,ECX
00425D32  |.  8945 E0    MOV DWORD PTR SS:[EBP-20],EAX
00425D35  |.  8B45 18    MOV EAX,DWORD PTR SS:[EBP+18]
00425D38  |.  8945 E4    MOV DWORD PTR SS:[EBP-1C],EAX
00425D3B  |.  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425D3E  |.  8945 E8    MOV DWORD PTR SS:[EBP-18],EAX
00425D41  |.  8B45 1C    MOV EAX,DWORD PTR SS:[EBP+1C]
00425D44  |.  8945 EC    MOV DWORD PTR SS:[EBP-14],EAX
00425D47  |.  8B45 20    MOV EAX,DWORD PTR SS:[EBP+20]
00425D4A  |.  8945 F0    MOV DWORD PTR SS:[EBP-10],EAX
00425D4D  |.  8365 F4 00 AND DWORD PTR SS:[EBP-C],0
00425D51  |.  8365 F8 00 AND DWORD PTR SS:[EBP-8],0
00425D55  |.  8365 FC 00 AND DWORD PTR SS:[EBP-4],0
00425D59  |.  8965 F4    MOV DWORD PTR SS:[EBP-C],ESP
00425D5C  |.  896D F8    MOV DWORD PTR SS:[EBP-8],EBP
00425D5F  |.  64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
00425D65  |.  8945 D8    MOV DWORD PTR SS:[EBP-28],EAX
00425D68  |.  8D45 D8    LEA EAX,DWORD PTR SS:[EBP-28]
00425D6B  |.  64:A3 0000000>MOV DWORD PTR FS:[0],EAX
00425D71  |.  C745 C8 01000>MOV DWORD PTR SS:[EBP-38],1
00425D78  |.  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
00425D7B  |.  8945 CC    MOV DWORD PTR SS:[EBP-34],EAX
00425D7E  |.  8B45 10    MOV EAX,DWORD PTR SS:[EBP+10]
00425D81  |.  8945 D0    MOV DWORD PTR SS:[EBP-30],EAX
00425D84  |.  E8 25510000 CALL gektz.0042AEAE
00425D89  |.  8B80 80000000 MOV EAX,DWORD PTR DS:[EAX+80]
00425D8F  |.  8945 D4    MOV DWORD PTR SS:[EBP-2C],EAX
00425D92  |.  8D45 CC    LEA EAX,DWORD PTR SS:[EBP-34]
00425D95  |.  50          PUSH EAX
00425D96  |.  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
00425D99  |.  FF30       PUSH DWORD PTR DS:[EAX]
00425D9B  |.  FF55 D4    CALL DWORD PTR SS:[EBP-2C]
00425D9E  |.  59          POP ECX
00425D9F  |.  59          POP ECX
00425DA0  |.  8365 C8 00 AND DWORD PTR SS:[EBP-38],0
00425DA4  |.  837D FC 00 CMP DWORD PTR SS:[EBP-4],0
00425DA8  |.  74 17       JE SHORT gektz.00425DC1
00425DAA  |.  64:8B1D 00000>MOV EBX,DWORD PTR FS:[0]
00425DB1  |.  8B03       MOV EAX,DWORD PTR DS:[EBX]
00425DB3  |.  8B5D D8    MOV EBX,DWORD PTR SS:[EBP-28]
00425DB6  |.  8903       MOV DWORD PTR DS:[EBX],EAX
00425DB8  |.  64:891D 00000>MOV DWORD PTR FS:[0],EBX
00425DBF  |.  EB 09       JMP SHORT gektz.00425DCA
00425DC1  |>  8B45 D8    MOV EAX,DWORD PTR SS:[EBP-28]
00425DC4  |.  64:A3 0000000>MOV DWORD PTR FS:[0],EAX
00425DCA  |>  8B45 C8    MOV EAX,DWORD PTR SS:[EBP-38]
00425DCD  |>  5B          POP EBX
00425DCE  |.  C9          LEAVE
00425DCF  \.  C3          RETN
00425DD0 .  55          PUSH EBP
00425DD1 .  8BEC       MOV EBP,ESP
00425DD3 .  51          PUSH ECX
00425DD4 .  53          PUSH EBX
00425DD5 .  FC          CLD
00425DD6 .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425DD9 .  8B48 08    MOV ECX,DWORD PTR DS:[EAX+8]
00425DDC .  334D 0C    XOR ECX,DWORD PTR SS:[EBP+C]
00425DDF .  E8 43DEFFFF CALL gektz.00423C27
00425DE4 .  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
00425DE7 .  8B40 04    MOV EAX,DWORD PTR DS:[EAX+4]
00425DEA .  83E0 66    AND EAX,66
00425DED .  74 11       JE SHORT gektz.00425E00
00425DEF .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425DF2 .  C740 24 01000>MOV DWORD PTR DS:[EAX+24],1
00425DF9 .  33C0       XOR EAX,EAX
00425DFB .  40          INC EAX
00425DFC .  EB 6C       JMP SHORT gektz.00425E6A
00425DFE .  EB 6A       JMP SHORT gektz.00425E6A
00425E00 >  6A 01       PUSH 1                                  ; /Arg8 = 00000001
00425E02 .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]          ; |
00425E05 .  FF70 18    PUSH DWORD PTR DS:[EAX+18]             ; |Arg7
00425E08 .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]          ; |
00425E0B .  FF70 14    PUSH DWORD PTR DS:[EAX+14]             ; |Arg6
00425E0E .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]          ; |
00425E11 .  FF70 0C    PUSH DWORD PTR DS:[EAX+C]             ; |Arg5
00425E14 .  6A 00       PUSH 0                                  ; |Arg4 = 00000000
00425E16 .  FF75 10    PUSH DWORD PTR SS:[EBP+10]             ; |Arg3
00425E19 .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]          ; |
00425E1C .  FF70 10    PUSH DWORD PTR DS:[EAX+10]             ; |Arg2
00425E1F .  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
00425E22 .  E8 63AF0000 CALL gektz.00430D8A                   ; \gektz.00430D8A
00425E27 .  83C4 20    ADD ESP,20
00425E2A .  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425E2D .  8378 24 00 CMP DWORD PTR DS:[EAX+24],0
00425E31 .  75 0B       JNZ SHORT gektz.00425E3E
00425E33 .  FF75 08    PUSH DWORD PTR SS:[EBP+8]
00425E36 .  FF75 0C    PUSH DWORD PTR SS:[EBP+C]
00425E39 .  E8 05FEFFFF CALL gektz.00425C43
00425E3E >  6A 00       PUSH 0
00425E40 .  6A 00       PUSH 0
00425E42 .  6A 00       PUSH 0
00425E44 .  6A 00       PUSH 0
00425E46 .  6A 00       PUSH 0
00425E48 .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
00425E4B .  50          PUSH EAX
00425E4C .  68 23010000 PUSH 123
00425E51 .  E8 A5FEFFFF CALL gektz.00425CFB
00425E56 .  83C4 1C    ADD ESP,1C
00425E59 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
00425E5C .  8B5D 0C    MOV EBX,DWORD PTR SS:[EBP+C]
00425E5F .  8B63 1C    MOV ESP,DWORD PTR DS:[EBX+1C]
00425E62 .  8B6B 20    MOV EBP,DWORD PTR DS:[EBX+20]
00425E65 .  FFE0       JMP EAX
00425E67 .  33C0       XOR EAX,EAX
00425E69 .  40          INC EAX
00425E6A >  5B          POP EBX
00425E6B .  C9          LEAVE
00425E6C .  C3          RETN
00425E6D  /$  55          PUSH EBP
00425E6E  |.  8BEC       MOV EBP,ESP
00425E70  |.  51          PUSH ECX
00425E71  |.  53          PUSH EBX
00425E72  |.  56          PUSH ESI
00425E73  |.  57          PUSH EDI
00425E74  |.  8B7D 08    MOV EDI,DWORD PTR SS:[EBP+8]
00425E77  |.  8B47 10    MOV EAX,DWORD PTR DS:[EDI+10]
00425E7A  |.  8B77 0C    MOV ESI,DWORD PTR DS:[EDI+C]
00425E7D  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
00425E80  |.  8BDE       MOV EBX,ESI
00425E82  |.  EB 2D       JMP SHORT gektz.00425EB1
00425E84  |>  83FE FF    /CMP ESI,-1
00425E87  |.  75 05       |JNZ SHORT gektz.00425E8E
00425E89  |.  E8 2CB00000 |CALL gektz.00430EBA
00425E8E  |>  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00425E91  |.  4E          |DEC ESI
00425E92  |.  8BC6       |MOV EAX,ESI
00425E94  |.  6BC0 14    |IMUL EAX,EAX,14
00425E97  |.  03C1       |ADD EAX,ECX
00425E99  |.  8B4D 10    |MOV ECX,DWORD PTR SS:[EBP+10]
00425E9C  |.  3948 04    |CMP DWORD PTR DS:[EAX+4],ECX
00425E9F  |.  7D 05       |JGE SHORT gektz.00425EA6
00425EA1  |.  3B48 08    |CMP ECX,DWORD PTR DS:[EAX+8]
00425EA4  |.  7E 05       |JLE SHORT gektz.00425EAB
00425EA6  |>  83FE FF    |CMP ESI,-1
00425EA9  |.  75 09       |JNZ SHORT gektz.00425EB4
00425EAB  |>  FF4D 0C    |DEC DWORD PTR SS:[EBP+C]
00425EAE  |.  8B5D 08    |MOV EBX,DWORD PTR SS:[EBP+8]
00425EB1  |>  8975 08       MOV DWORD PTR SS:[EBP+8],ESI
00425EB4  |>  837D 0C 00 |CMP DWORD PTR SS:[EBP+C],0
00425EB8  |.^ 7D CA       \JGE SHORT gektz.00425E84
00425EBA  |.  8B45 14    MOV EAX,DWORD PTR SS:[EBP+14]
00425EBD  |.  46          INC ESI
00425EBE  |.  8930       MOV DWORD PTR DS:[EAX],ESI
00425EC0  |.  8B45 18    MOV EAX,DWORD PTR SS:[EBP+18]
00425EC3  |.  8918       MOV DWORD PTR DS:[EAX],EBX
00425EC5  |.  3B5F 0C    CMP EBX,DWORD PTR DS:[EDI+C]
00425EC8  |.  77 04       JA SHORT gektz.00425ECE
00425ECA  |.  3BF3       CMP ESI,EBX
00425ECC  |.  76 05       JBE SHORT gektz.00425ED3
00425ECE  |>  E8 E7AF0000 CALL gektz.00430EBA
00425ED3  |>  8BC6       MOV EAX,ESI
00425ED5  |.  6BC0 14    IMUL EAX,EAX,14
00425ED8  |.  0345 FC    ADD EAX,DWORD PTR SS:[EBP-4]
00425EDB  |.  5F          POP EDI
00425EDC  |.  5E          POP ESI
00425EDD  |.  5B          POP EBX
00425EDE  |.  C9          LEAVE
00425EDF  \.  C3          RETN
00425EE0  /$  8B4424 08    MOV EAX,DWORD PTR SS:[ESP+8]
00425EE4  |.  56          PUSH ESI
00425EE5  |.  8B7424 08    MOV ESI,DWORD PTR SS:[ESP+8]
00425EE9  |.  8906       MOV DWORD PTR DS:[ESI],EAX
00425EEB  |.  E8 BE4F0000 CALL gektz.0042AEAE
00425EF0  |.  8B80 98000000 MOV EAX,DWORD PTR DS:[EAX+98]
00425EF6  |.  8946 04    MOV DWORD PTR DS:[ESI+4],EAX
00425EF9  |.  E8 B04F0000 CALL gektz.0042AEAE
00425EFE  |.  89B0 98000000 MOV DWORD PTR DS:[EAX+98],ESI
00425F04  |.  8BC6       MOV EAX,ESI
00425F06  |.  5E          POP ESI
00425F07  \.  C3          RETN
00425F08  /$  E8 A14F0000 CALL gektz.0042AEAE
00425F0D  |.  8B80 98000000 MOV EAX,DWORD PTR DS:[EAX+98]
00425F13  |.  EB 0B       JMP SHORT gektz.00425F20
00425F15  |>  8B08       /MOV ECX,DWORD PTR DS:[EAX]
00425F17  |.  3B4C24 04    |CMP ECX,DWORD PTR SS:[ESP+4]
00425F1B  |.  74 09       |JE SHORT gektz.00425F26
00425F1D  |.  8B40 04    |MOV EAX,DWORD PTR DS:[EAX+4]
00425F20  |>  85C0          TEST EAX,EAX
00425F22  |.^ 75 F1       \JNZ SHORT gektz.00425F15
00425F24  |.  40          INC EAX
00425F25  |.  C3          RETN
00425F26  |>  33C0       XOR EAX,EAX
00425F28  \.  C3          RETN
00425F29 $  56          PUSH ESI
00425F2A .  E8 7F4F0000 CALL gektz.0042AEAE
00425F2F .  8B7424 08    MOV ESI,DWORD PTR SS:[ESP+8]
00425F33 .  3BB0 98000000 CMP ESI,DWORD PTR DS:[EAX+98]
00425F39 .  75 10       JNZ SHORT gektz.00425F4B
00425F3B .  E8 6E4F0000 CALL gektz.0042AEAE
00425F40 .  8B4E 04    MOV ECX,DWORD PTR DS:[ESI+4]
00425F43 .  8988 98000000 MOV DWORD PTR DS:[EAX+98],ECX
00425F49 .  5E          POP ESI
00425F4A .  C3          RETN
00425F4B >  E8 5E4F0000 CALL gektz.0042AEAE
00425F50 .  8B80 98000000 MOV EAX,DWORD PTR DS:[EAX+98]
00425F56 .  EB 09       JMP SHORT gektz.00425F61
00425F58 >  8B48 04    MOV ECX,DWORD PTR DS:[EAX+4]
00425F5B .  3BF1       CMP ESI,ECX
00425F5D .  74 0E       JE SHORT gektz.00425F6D
00425F5F .  8BC1       MOV EAX,ECX
00425F61 >  8378 04 00 CMP DWORD PTR DS:[EAX+4],0
00425F65 .^ 75 F1       JNZ SHORT gektz.00425F58
00425F67 .  5E          POP ESI
00425F68 .  E9 4DAF0000 JMP gektz.00430EBA
00425F6D >  8B4E 04    MOV ECX,DWORD PTR DS:[ESI+4]
00425F70 .  8948 04    MOV DWORD PTR DS:[EAX+4],ECX
00425F73 .  5E          POP ESI
00425F74 .  C3          RETN
00425F75  /$  55          PUSH EBP
00425F76  |.  8BEC       MOV EBP,ESP
00425F78  |.  83EC 18    SUB ESP,18
00425F7B  |.  A1 B4244500 MOV EAX,DWORD PTR DS:[4524B4]
00425F80  |.  8365 E8 00 AND DWORD PTR SS:[EBP-18],0
00425F84  |.  8D4D E8    LEA ECX,DWORD PTR SS:[EBP-18]
00425F87  |.  33C1       XOR EAX,ECX
00425F89  |.  8B4D 08    MOV ECX,DWORD PTR SS:[EBP+8]
00425F8C  |.  8945 F0    MOV DWORD PTR SS:[EBP-10],EAX
00425F8F  |.  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00425F92  |.  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
00425F95  |.  8B45 14    MOV EAX,DWORD PTR SS:[EBP+14]
00425F98  |.  40          INC EAX
00425F99  |.  C745 EC CB5C4>MOV DWORD PTR SS:[EBP-14],gektz.00425CCB
00425FA0  |.  894D F8    MOV DWORD PTR SS:[EBP-8],ECX
00425FA3  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
00425FA6  |.  64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
00425FAC  |.  8945 E8    MOV DWORD PTR SS:[EBP-18],EAX
00425FAF  |.  8D45 E8    LEA EAX,DWORD PTR SS:[EBP-18]
00425FB2  |.  64:A3 0000000>MOV DWORD PTR FS:[0],EAX
00425FB8  |.  FF75 18    PUSH DWORD PTR SS:[EBP+18]             ; /Arg3
00425FBB  |.  51          PUSH ECX                               ; |Arg2
00425FBC  |.  FF75 10    PUSH DWORD PTR SS:[EBP+10]             ; |Arg1
00425FBF  |.  E8 4CAF0000 CALL gektz.00430F10                   ; \gektz.00430F10
00425FC4  |.  8BC8       MOV ECX,EAX
00425FC6  |.  8B45 E8    MOV EAX,DWORD PTR SS:[EBP-18]

[培训]科锐逆向工程师培训第53期2025年7月8日开班！

收藏・0

免费・0

支持

最新回复 (2)
yzengr 雪币： 202 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 162 粉丝 0 关注私信	yzengr 2 楼发个下载点我下来研究研究 2008-2-5 16:07 0
zhouyur 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 6 粉丝 0 关注私信	zhouyur 3 楼地址是470K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3N6W2K9%4c8*7i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8W2)9J5c8V1E0f1h3U0q4Q4x3X3f1#2y4g2)9J5k6h3g2^5k6g2)9J5y4X3&6T1M7%4m8Q4x3@1u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4@1f1%4i4K6W2r3i4@1p5#2i4@1f1&6i4K6R3I4i4K6V1K6i4@1f1%4i4K6W2m8i4K6R3@1i4@1f1#2i4K6V1I4i4K6S2m8i4@1f1^5i4@1q4r3i4K6R3&6i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1@1i4@1t1^5i4K6S2n7i4@1f1$3i4K6R3H3i4K6S2q4i4@1f1@1i4@1t1&6i4K6R3^5i4@1f1^5i4K6R3@1i4@1t1I4i4@1f1^5i4@1u0r3i4K6V1&6i4@1f1@1i4@1t1^5i4@1q4m8i4@1f1#2i4@1p5K6i4@1t1K6i4@1f1$3i4K6R3^5i4K6V1I4f1g2p5#2z5e0b7^5x3U0V1^5z5l9`.`. 2008-2-5 19:58 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

zhouyur

发帖

回帖

RANK

关注

私信

他的文章

[求助]帮我看看这个程序 3050
[求助]帮我看看这个壳 2972

关于我们

联系我们

企业服务

看雪公众号

最新回复 (2)
yzengr 雪币： 202 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 162 粉丝 0 关注私信	yzengr 2 楼发个下载点我下来研究研究 2008-2-5 16:07 0
zhouyur 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 6 粉丝 0 关注私信	zhouyur 3 楼地址是470K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3N6W2K9%4c8*7i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8W2)9J5c8V1E0f1h3U0q4Q4x3X3f1#2y4g2)9J5k6h3g2^5k6g2)9J5y4X3&6T1M7%4m8Q4x3@1u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4@1f1%4i4K6W2r3i4@1p5#2i4@1f1&6i4K6R3I4i4K6V1K6i4@1f1%4i4K6W2m8i4K6R3@1i4@1f1#2i4K6V1I4i4K6S2m8i4@1f1^5i4@1q4r3i4K6R3&6i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1@1i4@1t1^5i4K6S2n7i4@1f1$3i4K6R3H3i4K6S2q4i4@1f1@1i4@1t1&6i4K6R3^5i4@1f1^5i4K6R3@1i4@1t1I4i4@1f1^5i4@1u0r3i4K6V1&6i4@1f1@1i4@1t1^5i4@1q4m8i4@1f1#2i4@1p5K6i4@1t1K6i4@1f1$3i4K6R3^5i4K6V1I4f1g2p5#2z5e0b7^5x3U0V1^5z5l9`.`. 2008-2-5 19:58 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复