- UID
- 18845
注册时间2006-7-22
阅读权限10
最后登录1970-1-1
周游历练
TA的每日心情 | 郁闷 2022-10-26 21:54 |
---|
签到天数: 5 天 [LV.2]偶尔看看I
|
楼主 |
发表于 2009-1-27 21:14:20
|
显示全部楼层
用OD载入就是这样的
004F34F0 > 64:A1 0000000>mov eax, dword ptr fs:[0]
004F34F6 55 push ebp
004F34F7 8BEC mov ebp, esp
004F34F9 6A FF push -1
004F34FB 68 98195000 push 00501998
004F3500 68 04924F00 push 004F9204
004F3505 50 push eax
004F3506 64:8925 00000>mov dword ptr fs:[0], esp
004F350D 83EC 60 sub esp, 60
004F3510 53 push ebx
004F3511 56 push esi
004F3512 57 push edi
004F3513 8965 E8 mov dword ptr [ebp-18], esp
004F3516 FF15 2CF34F00 call dword ptr [<&KERNEL32.GetVersion>; kernel32.GetVersion
004F351C A3 B0A25000 mov dword ptr [50A2B0], eax
004F3521 33C0 xor eax, eax
004F3523 A0 B1A25000 mov al, byte ptr [50A2B1]
004F3528 A3 BCA25000 mov dword ptr [50A2BC], eax
004F352D A1 B0A25000 mov eax, dword ptr [50A2B0]
004F3532 C12D B0A25000>shr dword ptr [50A2B0], 10
004F3539 25 FF000000 and eax, 0FF
004F353E A3 B8A25000 mov dword ptr [50A2B8], eax
004F3543 C1E0 08 shl eax, 8
004F3546 0305 BCA25000 add eax, dword ptr [50A2BC]
004F354C A3 B4A25000 mov dword ptr [50A2B4], eax
004F3551 E8 6A5C0000 call 004F91C0
004F3556 85C0 test eax, eax
有没有高手帮忙看看这个软件是用什么壳啊 |
|