VMP1.8主程序脱壳技术方案.docVIP

窗体顶端 NOOBY牛已经玩得差不多了 我来补一刀 ^_^ 引用:55 push ebpE8 30C52800 call 0029D7AE ; 0029D7AE0001127E 8BC0 mov eax,eax50 push eaxE8 E8E92700 call 0028FC6E ; 0028FC6E8BC0 mov eax,eax55 push ebpE8 5B333700 call 003845E9 ; 003845E90001128E 8BC0 mov eax,eax52 push edxE8 FBE02C00 call 002DF391 ; 002DF391 被错位了 写段脚本恢复FF25的错位 引用: luanxu:inc searchfind search,#E8??????008BC0#cmp $RESULT,0je exitmov search,$RESULTGCI search,DESTINATIONcmp $RESULT,001F3000 //UPX0-VAjb luanxucmp $RESULT,003DE000 //UPX2-VAjae luanxuG