应用olldbg脱telock加壳之菜鸟篇
2007-01-12 20:12:47 来源:WEB开发网按CTRL+F查找TEST ESI,ESI到这儿(我们要找的可不是这儿)
0064F17D 85F6 TEST ESI,ESI
0064F17F 0F84 8B000000 JE cookbook.0064F210
0064F185 8B95 62D34000 MOV EDX,DWORD PTR SS:[EBP+40D362]
0064F18B 03F2 ADD ESI,EDX
0064F18D 2B95 66D34000 SUB EDX,DWORD PTR SS:[EBP+40D366]
0064F193 74 7B JE SHORT cookbook.0064F210
0064F195 8BDA MOV EBX,EDX
0064F197 C1EB 10 SHR EBX,10
0064F19A 8B06 MOV EAX,DWORD PTR DS:[ESI]
0064F19C 85C0 TEST EAX,EAX
0064F19E 74 70 JE SHORT cookbook.0064F210
0064F1A0 8B4E 04 MOV ECX,DWORD PTR DS:[ESI+4]
0064F1A3 83E9 08 SUB ECX,8
0064F1A6 D1E9 SHR ECX,1
0064F1A8 8BBD 62D34000 MOV EDI,DWORD PTR SS:[EBP+40D362]
0064F1AE 03F8 ADD EDI,EAX
0064F1B0 83C6 08 ADD ESI,8
0064F1B3 0FB706 MOVZX EAX,WORD PTR DS:[ESI]
0064F1B6 C1C8 0C ROR EAX,0C
0064F1B9 FEC8 DEC AL
0064F1BB 78 4C JS SHORT cookbook.0064F209
0064F1BD 74 0E JE SHORT cookbook.0064F1CD
0064F1BF FEC8 DEC AL
0064F1C1 74 13 JE SHORT cookbook.0064F1D6
0064F1C3 FEC8 DEC AL
0064F1C5 74 3C JE SHORT cookbook.0064F203
0064F1C7 FEC8 DEC AL
更多精彩
赞助商链接