工具软件二进制安全 [2020]反花指令、VM代码神器 Capstone -懂的都懂 http://www.capstone-engine.org/ 测试EAC的VM: ```cpp mov [rsp+arg_8], rbx ror r9w, 2 lea r9, ds:588F66C5h[rdx*4] sar r9d, cl bts r9, 1Fh mov [rsp+arg_10], rbp lea r9, ds:0FFFFFFFFC17008A9h[rsi*2] sbb r9d, 2003FCE1h shrd r9w, cx, cl shl r9w, cl mov [rsp+arg_18], rsi cmc mov r9, cs:EasyAntiCheatBase ``` 通过Capstone修正后: ```cpp mov [rsp+arg_8], rbx mov [rsp+arg_10], rbp mov [rsp+arg_18], rsi mov r9, cs:EasyAntiCheatBase ``` 阅读全文 2020-07-23 huoji 2 条评论
