[收藏本方案]

AcProtect 1.41 外壳分析[25]

[入库：2005年8月19日] [更新：2007年3月24日]

本文简介：选择自 bmd2chen 的 blog
首页 上页 下页 尾页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] [39] [40] [41] [42] [43] [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56] [57] [58] [59] [60] [61] [62] [63] [64] [65] [66] [67] [68] [69]

ebp 0058afff 5d pop ebp 0058b000 837c24 04 ff cmp dword ptr ss:[esp+4],-1 0058b005 74 25 je short 0058b02c 0058b007 90 nop 0058b008 90 nop 0058b009 90 nop 0058b00a 90 nop 0058b00b 8b98 2c854100 mov ebx,dword ptr ds:[eax+41852c] 0058b011 803b cc cmp byte ptr ds:[ebx],0cc 0058b014 0f84 de000000 je <case else> 0058b01a 807b 01 cc cmp byte ptr ds:[ebx+1],0cc 0058b01e 0f84 d4000000 je <case else> 0058b024 8bc3 mov eax,ebx 0058b026 60 pushad 0058b027 e9 cc000000 jmp <case else> 0058b02c 60 pushad 0058b02d e8 ce100000 call <sub_getebp >
0058b032 8b7c24 28 mov edi,dword ptr ss:[esp+28] 0058b036 8b4424 30 mov eax,dword ptr ss:[esp+30] 0058b03a 0bc0 or eax,eax ; 当eax＝4的时候加密代码，eax=5的时候解密代码 0058b03c 74 3f je short <case eax==0> 0058b03e 90 nop 0058b03f 90 nop 0058b040 90 nop 0058b041 90 nop 0058b042 48 dec eax 0058b043 0bc0 or eax,eax 0058b045 74 65 je short <case eax==1> 0058b047 90 nop 0058b048 90 nop 0058b049 90 nop 0058b04a 90 nop 0058b04b 48 dec eax 0058b04c 0bc0 or eax,eax 0058b04e 74 68 je short <case eax==2> 0058b050 90 nop 0058b051 90 nop 0058b052 90 nop 0058b053 90 nop 0058b054 48 dec eax 0058b055 0bc0 or eax,eax 0058b057 74 75 je short <case eax==3> 0058b059 90 nop 0058b05a 90 nop 0058b05b 90 nop 0058b05c 90 nop 0058b05d 48 dec eax 0058b05e 0bc0 or eax,eax 0058b060 74 76 je short <case eax==4> 0058b062 90 nop 0058b063 90 nop 0058b064 90 nop 0058b065 90 nop 0058b066 48 dec eax 0058b067 0bc0 or eax,eax 0058b069 74 77 je short <case eax==5> 0058b06b 90 nop 0058b06c 90 nop 0058b06d 90 nop 0058b06e 90 nop 0058b06f 48 dec eax 0058b070 0bc0 or eax,eax 0058b072 74 78 je short <case eax==6> 0058b074 90 nop 0058b075 90 nop 0058b076 90 nop 0058b077 90 nop 0058b078 eb 7e jmp short <case else> 0058b07a 90 nop 0058b07b 90 nop 0058b07c 90 nop 0058b07d > 8db5 2cf54000 lea esi,dword ptr

首页 上页 下页 尾页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] [39] [40] [41] [42] [43] [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56] [57] [58] [59] [60] [61] [62] [63] [64] [65] [66] [67] [68] [69]
本文关键：AcProtect 1.41 外壳分析
　　相关方案
Google
 

本站最佳浏览方式为 分辨率 1024x768 IE 6.0（或更高版本的 IE浏览器）

go top