电脑常用花指令大全.docVIP

常用花指令大全 用花指令大全常用花指令大全╬┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅╬常用花指令大全╬┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅╬ ┇部分花指令内容相同只是改了一些跳转处的汇编代码换了名字┇ ┇大家在加花指令的时候可以在新入口处先NOP几行在开始加花┇┇在加花的同时你也可以在花指令中随便NOP几行在继续添加花┇╬┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅╬************************************************************************1.伪装vc++5.0代码：PUSH EBP??MOV EBP,ESP??PUSH -1??push 415448?? -\___PUSH 4021A8?? -/?? 在这段代码中类似这样的操作数可以乱填??MOV EAX,DWORD PTR FS:[0]??PUSH EAX??MOV DWORD PTR FS:[0],ESP??ADD ESP,-6C??PUSH EBX??PUSH ESI??PUSH EDI??ADD BYTE PTR DS:[EAX],AL?? /这条指令可以不要!jmp 原入口地址************************************************************************2.胡乱跳转代码：push ebpmov ebp,espinc ecxpush edxnoppop edxdec ecxpop ebpinc ecxloop somewhere?? /跳转到上面那段代码地址去！??somewhere:??nop?? /胡乱跳转的开始...jmp 下一个jmp的地址?? /在附近随意跳jmp ...?? /...jmp 原入口地址?? /跳到原始oep************************************************************************3.伪装c++代码：push ebpmov ebp,esppush -1push 111111push 222222mov eax,fs:[0]push eaxmov fs:[0],esppop eaxmov fs:[0],eaxpop eaxpop eaxpop eaxpop eaxmov ebp,eaxjmp 原入口地址************************************************************************4.伪装Microsoft Visual C++ 6.0代码：PUSH -1PUSH 0PUSH 0MOV EAX,DWORD PTR FS:[0]PUSH EAXMOV DWORD PTR FS:[0],ESPSUB ESP,68PUSH EBXPUSH ESIPUSH EDIPOP EAXPOP EAXPOP EAXADD ESP,68POP EAXMOV DWORD PTR FS:[0],EAXPOP EAXPOP EAXPOP EAXPOP EAXMOV EBP,EAXJMP 原入口地址************************************************************************5.伪装防杀精灵一号防杀代码：push ebpmov ebp,esppush -1push 666666push 888888mov eax,dword ptr fs:[0]push eaxmov dword ptr fs:[0],esppop eaxmov dword ptr fs:[0],eaxpop eaxpop eaxpop eaxpop eaxmov ebp,eaxjmp 原入口地址************************************************************************6.伪装防杀精灵二号防杀代码：push ebpmov ebp,esppush -1push 0push 0mov eax,dword ptr fs:[0]push eaxmov dword ptr fs:[0],espsub esp,68push ebxpush esipush edipop eaxpop eaxpop eaxadd esp,68p