|
|
#1
10-21-2008, 20:43
|
||||
|
||||
|
Is this really petite 1.3??
Hi all, have a program that every detector says is petite 1.3, but it don't look like it to me. I ain't seen code like this before
 Any ideas please  006A6098 $ /E9 F8BA0100 JMP prog.006C1B95 006A609D . |66:9C PUSHFW 006A609F . |60 PUSHAD 006A60A0 . |50 PUSH EAX 006A60A1 . |8D88 83F0A012 LEA ECX,DWORD PTR DS:[EAX+12A0F083] 006A60A7 . |8D90 04166488 LEA EDX,DWORD PTR DS:[EAX+88641604] 006A60AD . |8BDC MOV EBX,ESP 006A60AF . |8BE1 MOV ESP,ECX 006A60B1 . |68 86BC004A PUSH 4A00BC86 ---- 006C1B95 > \E8 2F13FEFF CALL prog.006A2EC9 006C1B9A . 73 26 JNB SHORT prog.006C1BC2 006C1B9C . 4F DEC EDI 006C1B9D . 7B 68 JPO SHORT prog.006C1C07
__________________
Regards, /hobferret Last edited by hobferret; 10-21-2008 at 20:45. Reason: forgot the code @ jump 
|
| Thread Tools | |
| Display Modes | |
|
|
Threaded Mode