-
-
[旧帖] 请问已知内存写入补丁，写入的东西，能否我们也造一个出来？ 0.00雪花
-
发表于: 2014-2-19 17:41
-
****************************************
监视进程PID:[192] 写入地址:[00010000] 数据长度:[1772]
写入数据:41 0 4C 0 4C 0 55 0 53 0 45 0 52 0 53 0 50 0 52 0 4F 0 46 0 49 0 4C 0 45 0 3D 0 43 0 3A 0 5C 0 44 0 6F 0 63 0 75 0 6D 0 65 0 6E 0 74 0 73 0 20 0 61 0 6E 0 64 0 20 0 53 0 65 0 74 0 74 0 69 0 6E 0 67 0 73 0 5C 0 41 0 6C 0 6C 0 20 0 55 0 73 0 65 0 72 0 73 0 0 0 41 0 50 0 50 0 44 0 41 0 54 0 41 0 3D 0 43 0 3A 0 5C 0 44 0 6F 0 63 0 75 0 6D 0 65 0 6E 0 74 0 73 0 20 0 61 0 6E 0 64 0 20 0 53 0 65 0 74 0 74 0 69 0 6E 0 67 0 73 0 5C 0 41 0 64 0 6D 0 69 0 6E 0 69 0 73 0 74 0 72 0 61 0 74 0 6F 0 72 0 5C 0 41 0 70 0 70 0 6C 0 69 0 63 0 61 0 74 0 69 0 6F 0 6E 0 20 0 44 0 61 0 74 0 61 0 0 0 43 0 6F 0 6D 0 6D 0 6F 0 6E 0 50 0 72 0 6F 0 67 0 72 0 61 0 6D 0 46 0 69 0 6C 0 65 0 73 0 3D 0 43 0 3A 0 5C 0 50 0 72 0 6F 0 67 0 72 0 61 0 6D 0 20 0 46 0 69 0 6C 0 65 0 73 0 5C 0 43 0 6F 0 6D 0 6D 0 6F 0 6E 0 20 0 46 0 69 0 6C 0 65 0 73 0 0 0 43 0 4F 0 4D 0 50 0 55 0 54 0 45 0 52 0 4E 0 41 0 4D 0 45 0 3D 0 4C 0 50 0 43 0 2D 0 59 0 30 0 54 0 53 0 49 0 45 0 0 0 43 0 6F 0 6D 0 53 0 70 0 65 0 63 0 3D 0 43 0 3A 0 5C 0 57 0 49 0 4E 0 44 0 4F
****************************************
监视进程PID:[192] 写入地址:[00020000] 数据长度:[1932]
写入数据:0 10 0 0 8C 7 0 0 0 20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 68 0 8 2 90 2 0 0 0 0 0 0 3C 1 3E 1 98 4 0 0 80 0 82 0 D8 5 0 0 84 0 86 0 5C 6 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 0 0 0 80 0 82 0 E4 6 0 0 1E 0 20 0 68 7 0 0 0 0 2 0 88 7 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
****************************************
监视进程PID:[192] 写入地址:[7FFDC010] 数据长度:[4]
写入数据:0 0 2 0
****************************************
监视进程PID:[192] 写入地址:[7FFDC1E8] 数据长度:[4]
写入数据:0 0 0 0
****************************************
监视进程PID:[192] 写入地址:[00B7F1D7] 数据长度:[4]
写入数据:EB F E8 D2
****************************************
监视进程PID:[192] 写入地址:[00B812B3] 数据长度:[4]
写入数据:EB 41 A1 FC
****************************************
监视进程PID:[192] 写入地址:[00B9105C] 数据长度:[4]
写入数据:EB 41 A1 FC
给个视频案例就行。
问题之二，
如图所示的DELHPI的程序，菜单 该用什么断点拦下？
监视进程PID:[192] 写入地址:[00010000] 数据长度:[1772]
写入数据:41 0 4C 0 4C 0 55 0 53 0 45 0 52 0 53 0 50 0 52 0 4F 0 46 0 49 0 4C 0 45 0 3D 0 43 0 3A 0 5C 0 44 0 6F 0 63 0 75 0 6D 0 65 0 6E 0 74 0 73 0 20 0 61 0 6E 0 64 0 20 0 53 0 65 0 74 0 74 0 69 0 6E 0 67 0 73 0 5C 0 41 0 6C 0 6C 0 20 0 55 0 73 0 65 0 72 0 73 0 0 0 41 0 50 0 50 0 44 0 41 0 54 0 41 0 3D 0 43 0 3A 0 5C 0 44 0 6F 0 63 0 75 0 6D 0 65 0 6E 0 74 0 73 0 20 0 61 0 6E 0 64 0 20 0 53 0 65 0 74 0 74 0 69 0 6E 0 67 0 73 0 5C 0 41 0 64 0 6D 0 69 0 6E 0 69 0 73 0 74 0 72 0 61 0 74 0 6F 0 72 0 5C 0 41 0 70 0 70 0 6C 0 69 0 63 0 61 0 74 0 69 0 6F 0 6E 0 20 0 44 0 61 0 74 0 61 0 0 0 43 0 6F 0 6D 0 6D 0 6F 0 6E 0 50 0 72 0 6F 0 67 0 72 0 61 0 6D 0 46 0 69 0 6C 0 65 0 73 0 3D 0 43 0 3A 0 5C 0 50 0 72 0 6F 0 67 0 72 0 61 0 6D 0 20 0 46 0 69 0 6C 0 65 0 73 0 5C 0 43 0 6F 0 6D 0 6D 0 6F 0 6E 0 20 0 46 0 69 0 6C 0 65 0 73 0 0 0 43 0 4F 0 4D 0 50 0 55 0 54 0 45 0 52 0 4E 0 41 0 4D 0 45 0 3D 0 4C 0 50 0 43 0 2D 0 59 0 30 0 54 0 53 0 49 0 45 0 0 0 43 0 6F 0 6D 0 53 0 70 0 65 0 63 0 3D 0 43 0 3A 0 5C 0 57 0 49 0 4E 0 44 0 4F
****************************************
监视进程PID:[192] 写入地址:[00020000] 数据长度:[1932]
写入数据:0 10 0 0 8C 7 0 0 0 20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 68 0 8 2 90 2 0 0 0 0 0 0 3C 1 3E 1 98 4 0 0 80 0 82 0 D8 5 0 0 84 0 86 0 5C 6 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 0 0 0 80 0 82 0 E4 6 0 0 1E 0 20 0 68 7 0 0 0 0 2 0 88 7 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
****************************************
监视进程PID:[192] 写入地址:[7FFDC010] 数据长度:[4]
写入数据:0 0 2 0
****************************************
监视进程PID:[192] 写入地址:[7FFDC1E8] 数据长度:[4]
写入数据:0 0 0 0
****************************************
监视进程PID:[192] 写入地址:[00B7F1D7] 数据长度:[4]
写入数据:EB F E8 D2
****************************************
监视进程PID:[192] 写入地址:[00B812B3] 数据长度:[4]
写入数据:EB 41 A1 FC
****************************************
监视进程PID:[192] 写入地址:[00B9105C] 数据长度:[4]
写入数据:EB 41 A1 FC
给个视频案例就行。
问题之二，
如图所示的DELHPI的程序，菜单 该用什么断点拦下？
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
我只看到了易语言...嘿嘿
|
|
|
大仙 ，您来了，我那问题2 给个思路再走，你 快回来，啦~~~ 啦~~~
|
|
|
|
