[收藏本方案]

AcProtect 1.41 外壳分析[7]

[入库：2005年8月19日] [更新：2007年3月24日]

本文简介：选择自 bmd2chen 的 blog
首页 上页 下页 尾页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] [39] [40] [41] [42] [43] [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56] [57] [58] [59] [60] [61] [62] [63] [64] [65] [66] [67] [68] [69]

mov edx,ebx 00592066 5b pop ebx 00592067 8932 mov dword ptr ds:[edx],esi 00592069 8f05 f5c85700 pop dword ptr ds:[57c8f5] 0059206f 8b15 f5c85700 mov edx,dword ptr ds:[57c8f5] 00592075 ff35 b1c85700 push dword ptr ds:[57c8b1] 0059207b 8f05 fdc85700 pop dword ptr ds:[57c8fd] 00592081 ff35 fdc85700 push dword ptr ds:[57c8fd] 00592087 52 push edx 00592088 8f05 19c95700 pop dword ptr ds:[57c919] 0059208e ff35 19c95700 push dword ptr ds:[57c919] 00592094 893424 mov dword ptr ss:[esp],esi 00592097 57 push edi 00592099 90 nop 0059209a 60 pushad ...... 00592260 83c4 04 add esp,4 00592263 61 popad 00592264 bf 1dca5700 mov edi,0057ca1d 00592269 890f mov dword ptr ds:[edi],ecx 0059226b 5f pop edi 0059226c ff35 1dca5700 push dword ptr ds:[57ca1d] 00592272 891d b1c95700 mov dword ptr ds:[57c9b1],ebx 00592278 ff35 b1c95700 push dword ptr ds:[57c9b1] 0059227e 51 push ecx 0059227f b9 d1c85700 mov ecx,0057c8d1 00592284 8bd9 mov ebx,ecx 00592286 59 pop ecx 00592287 53 push ebx 00592288 59 pop ecx 00592289 8f05 69c85700 pop dword ptr ds:[57c869] 0059228f 8b1d 69c85700 mov ebx,dword ptr ds:[57c869] 00592295 890d 99c95700 mov dword ptr ds:[57c999],ecx 0059229b ff35 99c95700 push dword ptr ds:[57c999] ; maincon.0057c8d1 005922a1 8f05 f5c95700 pop dword ptr ds:[57c9f5] ; maincon.0057c8d1 005922a7 8b35 f5c95700 mov esi,dword ptr ds:[57c9f5] ; maincon.0057c8d1 005922ad 8f05 49c85700 pop dword ptr ds:[57c849] 005922b3 56 push esi ; maincon.0057c8d1 005922b4 60 pushad 005922b5 e8 01000000 call 005922bb ...... 005923fb 830424 06 add dword ptr ss:[esp],6 005923ff c3 retn 00592400 e9 02000000 jmp 00592407 00592405 87cb xchg ebx,ecx 00592407 83ea fc sub edx,-4 0059240a 2b32 sub esi,dword ptr ds:[edx] 0059240c 83c2 fc add edx,-4 0059240f eb 01 jmp short 00592412 ; 这里也暗蔵杀机哦:-) 00592411 90 nop 00592412 e8 21b8ffff call<chek isdebuggerpresent> ; 再次检测有没有ring 3级调试器 00592417 78 01 js short 0059241a 00592419 f9 stc ...... 00592462 33db xor

首页 上页 下页 尾页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] [39] [40] [41] [42] [43] [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56] [57] [58] [59] [60] [61] [62] [63] [64] [65] [66] [67] [68] [69]
本文关键：AcProtect 1.41 外壳分析
　　相关方案
Google
 

本站最佳浏览方式为 分辨率 1024x768 IE 6.0（或更高版本的 IE浏览器）

go top