【UnpackMe】Net 不一定好玩,但是玩起来还想玩,必须 要玩。大家来玩吧。。。。。。
本帖最后由 ghostfish 于 2016-1-30 03:44 编辑说明一下,这个不是我做的,但不是求脱求破的。发一张部份脱壳去混球后的源码。。。。。
private void method_0()
{
while (true)
{
if (Environment.GetEnvironmentVariable("COR_PROFILER") != null)
{
goto IL_06;
}
if (Environment.GetEnvironmentVariable("COR_ENABLE_PROFILING") != null)
{
goto IL_06;
}
IL_0C:
if (Debugger.IsLogging() || Debugger.IsLogging())
{
this.method_14();
}
Process[] processes = Process.GetProcesses();
Process[] array = processes;
for (int i = 0; i < array.Length; i++)
{
Process process = array[i];
string key;
switch (key = process.ProcessName.Trim())
{
case "REFLECTOR":
case "OLLYDBG":
case "WINDBG":
case "IDAG":
case "NETUNPACK":
case "DOTNETDUMPER":
case "MEGADUMPER":
this.method_14();
break;
}
string text = process.ProcessName.Trim();
if (text.StartsWith("IDA -"))
{
this.method_14();
}
if (text.StartsWith("OLLYDBG"))
{
this.method_14();
}
if (text.StartsWith(".NET REFLECTOR"))
{
this.method_14();
}
if (text.StartsWith(".NET GENERIC UNPACKER"))
{
this.method_14();
}
if (text.StartsWith("DOTNET DUMPER"))
{
this.method_14();
}
if (text.StartsWith("MEGADUMPER"))
{
this.method_14();
}
}
Thread.Sleep(1000);
continue;
IL_06:
this.method_14();
goto IL_0C;
}
}
半夜发帖不容易啊 学习一下,谢谢楼主
页:
[1]