[原创]c 利用活跃变量分析清除基本块中的垃圾指令 | 宜武汇-ag真人国际厅网站

.text:00411190                               loc_411190:                   ; code xref: decrypt_shellcode_411040 111↑j

.text:00411190 2b 7c 24 10                   sub     edi, [esp 6f4h var_6e4]

.text:00411194 c7 84 24 78 01 00 00 c5 bc 71 mov     [esp 6f4h var_57c], 4b71bcc5h

.text:00411194 4b

.text:0041119f c7 84 24 1c 02 00 00 53 8d 22 mov     [esp 6f4h var_4d8], 14228d53h

.text:0041119f 14

.text:004111aa c7 84 24 a4 00 00 00 55 d3 1f mov     [esp 6f4h var_650], 4b1fd355h

.text:004111aa 4b

.text:004111b5 c7 84 24 ec 00 00 00 40 0d 8e mov     [esp 6f4h var_608], 458e0d40h

.text:004111b5 45

.text:004111c0 c7 84 24 d4 01 00 00 6e e9 24 mov     [esp 6f4h var_520], 7524e96eh

.text:004111c0 75

.text:004111cb c7 84 24 a0 01 00 00 fa 0b 77 mov     [esp 6f4h var_554], 6b770bfah

........

.text:00412994 81 84 24 f4 01 00 00 52 f7 57 add     [esp 6f4h var_500], 5657f752h

.text:00412994 56

.text:0041299f 81 ac 24 08 02 00 00 5c eb 35 sub     [esp 6f4h var_4ec], 1b35eb5ch

.text:0041299f 1b

.text:004129aa 81 84 24 40 01 00 00 c4 cb 36 add     [esp 6f4h var_5b4], 7336cbc4h

.text:004129aa 73

.text:004129b5 81 6c 24 28 8b 9f 9c 39       sub     [esp 6f4h var_6cc], 399c9f8bh

.text:004129bd 81 84 24 80 02 00 00 7e c6 ac add     [esp 6f4h var_474], 20acc67eh

.text:004129bd 20

.text:004129c8 8b c7                         mov     eax, edi

.text:004129ca c1 e0 04                      shl     eax, 4

.text:004129cd 89 44 24 14                   mov     [esp 6f4h var_6e0], eax

.text:004129d1 8b 84 24 b0 02 00 00          mov     eax, [esp 6f4h var_444]

.text:004129d8 01 44 24 14                   add     [esp 6f4h var_6e0], eax

.text:004129dc 81 3d 74 44 83 00 96 01 00 00 cmp     ubytes, 196h

.text:004129e6 8d 34 3b                      lea     esi, [ebx edi]

.text:004129e9 75 0e                         jnz     short loc_4129f9

原文链接:https://bbs.kanxue.com/thread-277825.htm

网络摘文,本文作者:15h,如若转载,请注明出处:https://www.15cov.cn/2023/08/27/原创c利用活跃变量分析清除基本块中的垃圾指令/

发表评论

邮箱地址不会被公开。 必填项已用*标注

网站地图