|
12月7日升级――OllyMachine v0.20最终版
can OM using memory pointer? mov [addr], value mov value, [addr] mov [addr], [value]... |
|
|
|
用Ollydbg手脱Softlocx V5.0.0.6加壳的OCX
test test... not sure correct or not...because the file just run when i load it with olly.... 附件:dumped_.rar |
|
ESP定律,一分钟搞定ShellProtect壳
i just put a breakpoint on code section then f9....it bring me to the oep..... |
|
ASPR 1.23RC4 Pre-dip 的疑问(高手帮忙)
some part of the program code is encrypted....without a valid key the encrypted part will not decrypt....except someone share his valid key with u then u can get the decrypted part and fixed ur dump.... |
|
|
|
Are you a cracker
放鸽子 == 放飞机 ??????????? |
|
最新 ASProtect betas 1.32 and 2.0
there are 6 part of the program code are encrypted....without a working key.. i dun think there will be a working crack.... |
|
|
|
|
|
|
|
ASProtect V2.0 脱壳――Registry Clean Expert V3.52 UnPacked + 去除自检验
最初由 fly 发布 不如…… ;) i check this new version of asprotect... ur concept of...;) is still working in this new version..but now u have to get 3 group of value..;) |
|
morphine求助
... i just check the new version of morphine(2.7) they change the calculation of the oep... |
|
morphine求助
this packer is quite good...:)...no idea how to unpack it... may be fly know how to unpack it... but i found a way to inline patch it.. here is an example i patch sub esp, 44 to add esp,-44 附件:NOTEPAD(ip).rar |
|
我写的垃圾壳,请大家看看
interesting...:) can u give more detail on how to use the packer.. i get error when run it under windows xp sp1... |
|
|
|
PECompact 2.x的壳高手来破
pecompact 2.x is very easy to unpack u can use ESP定律 to unpack it... OEP: 40AD7A IAT: 415000 Length: 1E8 |
|
ASProtect V1.3X 脱壳――Magic NetTrace V2.5.4
no, that 1 is not pre-dip... i refer that location as an antidump... btw... fly i found another location that write the bad iat address....but this location seldom use... the location is right above the CMP AL, 2 u will see something like this push eax call xxxxxxxx <--- another bad call jmp xxxxxxxx do the same trick will fix the iat... if u wan the exe i can send u... |
|
ASProtect V1.3X 脱壳――Magic NetTrace V2.5.4
@fly, for the 异常 u just need to change bytes to 00 from 54E430 - 54E498 not many asprotected program using this trick... another program using this trick is RegOrganizer... |
|
明月几时有――ASProtect V1.31 build 06.14主程序 脱壳
@fly, 没有啊。。。我的可以.... after adding the bmp i still can patch the program without any problem....how u get the patch data?? using the offset (compare) or (manual)...i'm using the compare method... |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值