最近想要弄個OziExplorer_3.95這軟體
沒想到一查是個ASProtect 1.2x - 1.3x [Registered] -> Alexey Solodovnikov
之前有學了一點脫殼結果老脫不掉
OD帶入直接兩個RETN
00401000 > 68 01F03001 push OziExp.0130F001
00401005 E8 01000000 call OziExp.
0040100B 0040100A C3 retn (0040100B 返回到這裏後就返回到0130F001區段)
0040100B C3 retn
0040100C - E9 93C49F30 jmp 30DFD4A4
0130F001 60 pushad
0130F002 E8 03000000 call OziExp.0130F00A
0130F007 - E9 EB045D45 jmp 468DF4F7
0130F00C 55 push ebp 0130F00D C3 retn
0130F00E E8 01000000 call OziExp.0130F014
0130F013 EB 5D jmp short OziExp.0130F072
0130F015 BB EDFFFFFF mov ebx,-13
0130F01A 03DD add ebx,ebp
0130F01C 81EB 00F0F000 sub ebx,OziExp.00F0F000
0130F022 807D 4D 01 cmp byte ptr ss:[ebp+4D],1
請高手幫個忙脫殼
順便教教我怎麼脫
OziExp.part1.rar
(500 KB, 下載次數: 819)
|