首页
社区
课程
招聘
[求助]脱ASPR时遇到的闻所未闻的问题!
发表于: 2007-3-3 12:59 3876

[求助]脱ASPR时遇到的闻所未闻的问题!

2007-3-3 12:59
3876
当我用OD载入程序后,按F9之后就出现错误提示:
OS: Windows XP Professional, SP2
CPU: GenuineIntel, Intel Pentium 4, MMX @ 3066 MHz

Module name: D:\Documents and Settings\Administrator\My Documents\脱壳\AsfTools3.exe

Application data:
VmVyc2lvbjogV3RLazBjQ3d5TlQzeHYyMXdWb2tLRks1N0x1MVZpQXN
BQWRWUENFOE1ISmtlSDUyTXlNZ09pY2pObFJ5WTNsRk5UbEJhVzkrYk
hSNGMycDdkeElxZEdSZ2J3SnhabmR4ZDNkalpYTk9aMlowQnc9PQ0KS
W1hZ2VCYXNlOiAwMDQwMDAwMA0KRWlwOiBGNUQ3OEMNCkVheDogNDYw
Mg0KRWN4OiBGRkZGRkUzMg0KRWR4OiAxMDAyNzA0DQpFYng6IEZGMEY
wMA0KRXNpOiBGOTA1REMNCkVkaTogMTAwNkQwNg0KRWJwOiBGRjBGND
cNCkVzcDogMTJGRjE4DQpFcnJvckNvZGU6IA0KOEEsMUYsNDcsM0EsN
UUsMzQsRiw4NSw3NyxGRixGRixGRiw4QixERiw4QiwzLDg1LEMwLEYs
ODUsQSxGRixGRixGRiw4QSw0LDI0LDgzLEM0LEMsNUQsNUYsNUUsNUI
sQzMsMCxGRixGRixGRixGRiw1LDAsMCwwLDMxLDM4LDMwLEQsQSwwLD
AsMC4uLg0KQ29kZSA9IFsyMTBdDQotIDANCi0gMA0KLSAwDQotIDQNC
i0gMA0KLSBbXQ0KPiBEOlxEb2N1bWVudHMgYW5kIFNldHRpbmdzXEFk
bWluaXN0cmF0b3JcTXkgRG9jdW1lbnRzXM3Rv8dcQXNmVG9vbHMzLmV
4ZQ0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXG50ZGxsLmRsbA0KPiBDOl
xXSU5ET1dTXHN5c3RlbTMyXGtlcm5lbDMyLmRsbA0KPiBDOlxXSU5ET
1dTXHN5c3RlbTMyXGFkdmFwaTMyLmRsbA0KPiBDOlxXSU5ET1dTXHN5
c3RlbTMyXFJQQ1JUNC5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlx
jb21jdGwzMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxHREkzMi
5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxVU0VSMzIuZGxsDQo+I
EM6XFdJTkRPV1Ncc3lzdGVtMzJcY29tZGxnMzIuZGxsDQo+IEM6XFdJ
TkRPV1Ncc3lzdGVtMzJcU0hMV0FQSS5kbGwNCj4gQzpcV0lORE9XU1x
zeXN0ZW0zMlxtc3ZjcnQuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMz
JcU0hFTEwzMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxvbGUzM
i5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxvbGVhdXQzMi5kbGwN
Cj4gQzpcV0lORE9XU1xzeXN0ZW0zMlx2ZXJzaW9uLmRsbA0KPiBDOlx
XSU5ET1dTXHN5c3RlbTMyXHdpbm1tLmRsbA0KPiBDOlxXSU5ET1dTXH
N5c3RlbTMyXElNTTMyLkRMTA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyX
ExQSy5ETEwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxVU1AxMC5kbGwN
Cj4gQzpcV0lORE9XU1xXaW5TeFNceDg2X01pY3Jvc29mdC5XaW5kb3d
zLkNvbW1vbi1Db250cm9sc182NTk1YjY0MTQ0Y2NmMWRmXzYuMC4yNj
AwLjIxODBfeC13d19hODRmMWZmOVxjb21jdGwzMi5kbGwNCj4gQzpcV
0lORE9XU1xzeXN0ZW0zMlx3c29jazMyLmRsbA0KPiBDOlxXSU5ET1dT
XHN5c3RlbTMyXFdTMl8zMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0
zMlxXUzJIRUxQLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXHV4dG
hlbWUuZGxsDQo+IEM6XFBST0dSQX4xXFlhaG9vIVxBU1NJU1R+MVxZa
GVscGVyLmRsbA0KDQpZYWhvbyEgQ2hpbmENCkhlbHBlciBNb2R1bGUN
CjMsIDAsIDIsIDEwMjANCkhlbHBlcg0KQ29weXJpZ2h0IDIwMDUgWWF
ob28hIENoaW5hDQpIZWxwZXIuZGxsDQozLCAwLCAyLCAxMDIwDQpIZW
xwZXIgTW9kdWxlDQoNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxNU0NUR
i5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxtc2N0ZmltZS5pbWU=
请问是什么原因呢?

[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法

收藏
免费 0
支持
分享
最新回复 (7)
雪    币: 191
活跃值: (58)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
2
我昨天也遇到了,把程序停在系统断点,然后检查硬件断点、断点、
脚本该停的停,该清的清。
2007-3-3 13:51
0
雪    币: 277
活跃值: (312)
能力值: ( LV9,RANK:330 )
在线值:
发帖
回帖
粉丝
3
他发现你了。
2007-3-3 14:33
0
雪    币: 400
活跃值: (13)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
隐藏OD>>
2007-3-3 14:37
0
雪    币: 235
活跃值: (12)
能力值: ( LV8,RANK:130 )
在线值:
发帖
回帖
粉丝
5
我没下任何断点啊,我直接按F9就出现这个了!
2007-3-3 18:19
0
雪    币: 846
活跃值: (221)
能力值: (RANK:570 )
在线值:
发帖
回帖
粉丝
6
用IDA脱吧
2007-3-3 18:35
0
雪    币: 235
活跃值: (12)
能力值: ( LV8,RANK:130 )
在线值:
发帖
回帖
粉丝
7
水平有限,OD都只能勉强应付,何谈静态脱壳!?
2007-3-3 18:40
0
雪    币: 846
活跃值: (221)
能力值: (RANK:570 )
在线值:
发帖
回帖
粉丝
8
用IDA看代码,把所有无关的代码都跳过,看到解码代码就在OD那里修改EIP直接执行解密的代码就好了。
2007-3-3 19:07
0
游客
登录 | 注册 方可回帖
返回
//