-
-
[求助]ASPack 2.12 -> Alexey Solodovnikov [Overlay] 双层伪装壳
-
发表于:
2009-3-21 11:37
3668
-
[求助]ASPack 2.12 -> Alexey Solodovnikov [Overlay] 双层伪装壳
用PEID查是ASPack 2.12 -> Alexey Solodovnikov [Overlay] 壳
00401000 > $ 60 pushad
00401001 . E8 03000000 call 00401009
00401006 E9 db E9
00401007 EB db EB
00401008 04 db 04
00401009 /$ 5D pop ebp
0040100A |. 45 inc ebp
0040100B |. 55 push ebp
0040100C \. C3 retn
0040100D E8 db E8
0040100E 01 db 01
0040100F 00 db 00
00401010 00 db 00
00401011 . 00EB add bl, ch
00401013 . 5D pop ebp
00401014 . BB EDFFFFFF mov ebx, -13
00401019 . 03DD add ebx, ebp
0040101B . 81EB 00400000 sub ebx, 4000
00401021 . 61 popad
00401022 .- E9 49491E00 jmp 005E5970
用esp定律找到oep 005e5970 好像还有一层壳不不知道怎么下手
软件下载:
d3dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4y4X3L8i4S2%4P5q4)9J5k6h3y4F1i4K6u0r3N6s2c8Q4x3X3g2J5j5i4t1`.
[培训]科锐逆向工程师培训第53期2025年7月8日开班!