Aspr2.XX_unpacker_v1.15E
var tmp_fix
..
lab162:
..
run
-- call crash_bug_fix // line 6130, after 'run' command in 'lab162'
| cmp eip, tmp1
|
-- > crash_bug_fix:
cmp count,sdksccount // check if last section; count holds incremental BOOL; sdksccount = # of VM_SDK
jne end_crash_bug_fix // if not equal, exit
mov tmp_fix,$RESULT // we backup $RESULT, since it's needed later
find newzeroVA,#6A0051E8# // and lookup
cmp $RESULT,0 // if not found, skip
je end
mov [$RESULT+4],61 // patch bytes
mov $RESULT,tmp_fix // restore $RESULT
发表于 2009-7-23 00:35
