|
PEBundle多重加壳脱壳修复问题求教
这个脱壳的外挂在OD中运行,登录没有问题,但是不在OD中运行,就闪退! |
|
[原创]双层UPX脱壳
你这好像有问题吧,点登录后就闪退!你试过了吗? |
|
[求助]ASProtect 2.3 SKE build 06.26 Beta [Extract]脱了不能运行
Overlay有附加数据,要用Overlay复制就好了! |
|
[讨论]一种让菜鸟郁闷的验证方式..高手请帮忙看看
这个好像有通过网络验证注册码吧?我有在下面这个位置发现过注册码一次, 0040AB8E . 50 PUSH EAX ; |hWnd 后来就没有了!!不知道什么原因!! 唉不懂汇编,不会分析~~ |
|
[讨论]一种让菜鸟郁闷的验证方式..高手请帮忙看看
找到了按按钮事件,但是不知道哪个是关键CALL 0040A958 . 55 PUSH EBP 0040A959 . 8BEC MOV EBP,ESP 0040A95B . 83C4 B0 ADD ESP,-50 0040A95E . 53 PUSH EBX 0040A95F . 56 PUSH ESI 0040A960 . 57 PUSH EDI 0040A961 . 8945 B0 MOV DWORD PTR SS:[EBP-50],EAX 0040A964 . B8 F4BF4E00 MOV EAX,IpSniper.004EBFF4 0040A969 . E8 9A1D0D00 CALL IpSniper.004DC708 0040A96E . 66:C745 C4 08>MOV WORD PTR SS:[EBP-3C],8 0040A974 . 33D2 XOR EDX,EDX 0040A976 . 8955 FC MOV DWORD PTR SS:[EBP-4],EDX 0040A979 . 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4] 0040A97C . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040A97F . 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50] 0040A982 . 8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8] 0040A988 . E8 4B550A00 CALL IpSniper.004AFED8 0040A98D . 837D FC 00 CMP DWORD PTR SS:[EBP-4],0 0040A991 . 74 08 JE SHORT IpSniper.0040A99B 0040A993 . 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4] 0040A996 . 8B4A FC MOV ECX,DWORD PTR DS:[EDX-4] 0040A999 . EB 02 JMP SHORT IpSniper.0040A99D 0040A99B > 33C9 XOR ECX,ECX 0040A99D > 83F9 03 CMP ECX,3 0040A9A0 . 7C 4C JL SHORT IpSniper.0040A9EE 0040A9A2 . 33C0 XOR EAX,EAX 0040A9A4 . 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX 0040A9A7 . 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8] 0040A9AA . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040A9AD . 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50] 0040A9B0 . 8B80 04030000 MOV EAX,DWORD PTR DS:[EAX+304] 0040A9B6 . E8 1D550A00 CALL IpSniper.004AFED8 0040A9BB . 837D F8 00 CMP DWORD PTR SS:[EBP-8],0 0040A9BF . 74 08 JE SHORT IpSniper.0040A9C9 0040A9C1 . 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8] 0040A9C4 . 8B4A FC MOV ECX,DWORD PTR DS:[EDX-4] 0040A9C7 . EB 02 JMP SHORT IpSniper.0040A9CB 0040A9C9 > 33C9 XOR ECX,ECX 0040A9CB > 83F9 08 CMP ECX,8 0040A9CE . BA 02000000 MOV EDX,2 0040A9D3 . 0F9CC0 SETL AL 0040A9D6 . 83E0 01 AND EAX,1 0040A9D9 . 50 PUSH EAX ; /Arg1 0040A9DA . 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8] ; | 0040A9DD . FF4D D0 DEC DWORD PTR SS:[EBP-30] ; | 0040A9E0 . E8 3BBE0D00 CALL IpSniper.004E6820 ; \IpSniper.004E6820 0040A9E5 . 59 POP ECX 0040A9E6 . 85C9 TEST ECX,ECX 0040A9E8 . 75 04 JNZ SHORT IpSniper.0040A9EE 0040A9EA . 33C0 XOR EAX,EAX 0040A9EC . EB 05 JMP SHORT IpSniper.0040A9F3 0040A9EE > B8 01000000 MOV EAX,1 0040A9F3 > 50 PUSH EAX ; /Arg1 0040A9F4 . FF4D D0 DEC DWORD PTR SS:[EBP-30] ; | 0040A9F7 . 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4] ; | 0040A9FA . BA 02000000 MOV EDX,2 ; | 0040A9FF . E8 1CBE0D00 CALL IpSniper.004E6820 ; \IpSniper.004E6820 0040AA04 . 59 POP ECX 0040AA05 . 84C9 TEST CL,CL 0040AA07 . 74 17 JE SHORT IpSniper.0040AA20 0040AA09 . 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50] 0040AA0C . E8 9F5A0900 CALL IpSniper.004A04B0 0040AA11 . 8B55 B4 MOV EDX,DWORD PTR SS:[EBP-4C] 0040AA14 . 64:8915 00000>MOV DWORD PTR FS:[0],EDX 0040AA1B . E9 2A020000 JMP IpSniper.0040AC4A 0040AA20 > 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50] 0040AA23 . 8B81 20030000 MOV EAX,DWORD PTR DS:[ECX+320] 0040AA29 . 33D2 XOR EDX,EDX 0040AA2B . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0040AA2D . FF51 64 CALL DWORD PTR DS:[ECX+64] 0040AA30 . 66:C745 C4 14>MOV WORD PTR SS:[EBP-3C],14 0040AA36 . 66:C745 C4 20>MOV WORD PTR SS:[EBP-3C],20 0040AA3C . 33C0 XOR EAX,EAX 0040AA3E . 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX 0040AA41 . 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C] 0040AA44 . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040AA47 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50] 0040AA4A . 8B81 F4020000 MOV EAX,DWORD PTR DS:[ECX+2F4] 0040AA50 . E8 83540A00 CALL IpSniper.004AFED8 0040AA55 . 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C] 0040AA58 . 8B0D B03F4F00 MOV ECX,DWORD PTR DS:[4F3FB0] ; IpSniper._MainFM 0040AA5E . 8B01 MOV EAX,DWORD PTR DS:[ECX] 0040AA60 . 8B80 64040000 MOV EAX,DWORD PTR DS:[EAX+464] 0040AA66 . 83C0 18 ADD EAX,18 0040AA69 . E8 E2BD0D00 CALL IpSniper.004E6850 0040AA6E . FF4D D0 DEC DWORD PTR SS:[EBP-30] 0040AA71 . 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C] 0040AA74 . BA 02000000 MOV EDX,2 0040AA79 . E8 A2BD0D00 CALL IpSniper.004E6820 0040AA7E . 66:C745 C4 2C>MOV WORD PTR SS:[EBP-3C],2C 0040AA84 . 33C9 XOR ECX,ECX 0040AA86 . 894D F0 MOV DWORD PTR SS:[EBP-10],ECX 0040AA89 . 8D55 F0 LEA EDX,DWORD PTR SS:[EBP-10] 0040AA8C . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040AA8F . 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50] 0040AA92 . 8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8] 0040AA98 . E8 3B540A00 CALL IpSniper.004AFED8 0040AA9D . 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10] 0040AAA0 . 33D2 XOR EDX,EDX 0040AAA2 . 8955 EC MOV DWORD PTR SS:[EBP-14],EDX 0040AAA5 . 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14] 0040AAA8 . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040AAAB . E8 24C00D00 CALL IpSniper.004E6AD4 0040AAB0 . 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14] 0040AAB3 . A1 B03F4F00 MOV EAX,DWORD PTR DS:[4F3FB0] 0040AAB8 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0040AABA . 8B81 64040000 MOV EAX,DWORD PTR DS:[ECX+464] 0040AAC0 . 83C0 1C ADD EAX,1C 0040AAC3 . E8 88BD0D00 CALL IpSniper.004E6850 0040AAC8 . FF4D D0 DEC DWORD PTR SS:[EBP-30] 0040AACB . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 0040AACE . BA 02000000 MOV EDX,2 0040AAD3 . E8 48BD0D00 CALL IpSniper.004E6820 0040AAD8 . FF4D D0 DEC DWORD PTR SS:[EBP-30] 0040AADB . 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10] 0040AADE . BA 02000000 MOV EDX,2 0040AAE3 . E8 38BD0D00 CALL IpSniper.004E6820 0040AAE8 . 66:C745 C4 38>MOV WORD PTR SS:[EBP-3C],38 0040AAEE . 33C9 XOR ECX,ECX 0040AAF0 . 894D E8 MOV DWORD PTR SS:[EBP-18],ECX 0040AAF3 . 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18] 0040AAF6 . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040AAF9 . 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50] 0040AAFC . 8B80 04030000 MOV EAX,DWORD PTR DS:[EAX+304] 0040AB02 . E8 D1530A00 CALL IpSniper.004AFED8 0040AB07 . 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18] 0040AB0A . 33D2 XOR EDX,EDX 0040AB0C . 8955 E4 MOV DWORD PTR SS:[EBP-1C],EDX 0040AB0F . 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C] 0040AB12 . FF45 D0 INC DWORD PTR SS:[EBP-30] 0040AB15 . E8 BABF0D00 CALL IpSniper.004E6AD4 0040AB1A . 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C] 0040AB1D . A1 B03F4F00 MOV EAX,DWORD PTR DS:[4F3FB0] 0040AB22 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0040AB24 . 8B81 64040000 MOV EAX,DWORD PTR DS:[ECX+464] 0040AB2A . 83C0 20 ADD EAX,20 0040AB2D . E8 1EBD0D00 CALL IpSniper.004E6850 0040AB32 . FF4D D0 DEC DWORD PTR SS:[EBP-30] 0040AB35 . 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C] 0040AB38 . BA 02000000 MOV EDX,2 0040AB3D . E8 DEBC0D00 CALL IpSniper.004E6820 0040AB42 . FF4D D0 DEC DWORD PTR SS:[EBP-30] 0040AB45 . 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18] 0040AB48 . BA 02000000 MOV EDX,2 0040AB4D . E8 CEBC0D00 CALL IpSniper.004E6820 0040AB52 . 8B0D B03F4F00 MOV ECX,DWORD PTR DS:[4F3FB0] ; IpSniper._MainFM 0040AB58 . 8B01 MOV EAX,DWORD PTR DS:[ECX] 0040AB5A . 8B80 64040000 MOV EAX,DWORD PTR DS:[EAX+464] 0040AB60 . E8 F3090000 CALL IpSniper.TConfig::SaveIt 0040AB65 . 66:C745 C4 00>MOV WORD PTR SS:[EBP-3C],0 0040AB6B . EB 0B JMP SHORT IpSniper.0040AB78 0040AB6D . 66:C745 C4 1C>MOV WORD PTR SS:[EBP-3C],1C 0040AB73 . E8 0A900D00 CALL IpSniper.004E3B82 0040AB78 > 8B15 B03F4F00 MOV EDX,DWORD PTR DS:[4F3FB0] ; IpSniper._MainFM 0040AB7E . 6A 00 PUSH 0 0040AB80 . 6A 00 PUSH 0 0040AB82 . 68 92810000 PUSH 8192 0040AB87 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0040AB89 . E8 DAB90A00 CALL IpSniper.004B6568 0040AB8E . 50 PUSH EAX ; |hWnd 0040AB8F . E8 E8CD0D00 CALL <JMP.&USER32.SendMessageA> ; \SendMessageA |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值