能力值:
( LV9,RANK:170 )
2 楼
borland c++程序,iat比较分散,你确认修复对了么
; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag RVA ModuleName Ordinal Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag: 0 = valid: no -> - Name contains the address of the redirected API (you can set
; it to zero if you edit it).
; - Ordinal is not considered but you should let '0000' as value.
; - ModuleName is not considered but you should let '?' as value.
;
; 1 = valid: yes -> All next parameters on the line will be considered.
; Function imported by ordinal must have no name (the 4th TAB must
; be there though).
;
; 2 = Equivalent to 0 but it is for the loader.
;
; 3 = Equivalent to 1 but it is for the loader.
;
; 4 = Equivalent to 0 with (R) tag.
;
; 5 = Equivalent to 1 with (R) tag.
;
; And finally, edit this file as your own risk! :-)
Target: E:\coolgame\lsclient.exe
OEP: 0000172C IATRVA: 00233100 IATSize: 00000E54
FThunk: 00233100 NbFunc: 00000003
1 00233100 advapi32.dll 01CB RegCloseKey
1 00233104 advapi32.dll 01E4 RegOpenKeyExA
1 00233108 advapi32.dll 01EE RegQueryValueExA
FThunk: 002332FC NbFunc: 0000007A
1 002332FC kernel32.dll 0032 CloseHandle
1 00233300 kernel32.dll 0038 CompareStringA
1 00233304 kernel32.dll 004C CreateEventA
1 00233308 kernel32.dll 0050 CreateFileA
1 0023330C kernel32.dll 0051 CreateFileMappingA
1 00233310 kernel32.dll 006D CreateThread
1 00233314 kernel32.dll 0070 CreateToolhelp32Snapshot
1 00233318 kernel32.dll 0080 DeleteCriticalSection
1 0023331C kernel32.dll 0097 EnterCriticalSection
1 00233320 kernel32.dll 0098 EnumCalendarInfoA
1 00233324 kernel32.dll 00B7 ExitProcess
1 00233328 kernel32.dll 00B8 ExitThread
1 0023332C kernel32.dll 00C2 FileTimeToDosDateTime
1 00233330 kernel32.dll 00C3 FileTimeToLocalFileTime
1 00233334 kernel32.dll 00CD FindClose
1 00233338 kernel32.dll 00D1 FindFirstFileA
1 0023333C kernel32.dll 00DA FindNextFileA
1 00233340 kernel32.dll 00E0 FindResourceA
1 00233344 kernel32.dll 00EC FormatMessageA
1 00233348 kernel32.dll 00F1 FreeLibrary
1 0023334C kernel32.dll 00F3 FreeResource
1 00233350 kernel32.dll 00F7 GetACP
1 00233354 kernel32.dll 00FE GetCPInfo
1 00233358 kernel32.dll 010A GetCommandLineA
1 0023335C kernel32.dll 013A GetCurrentDirectoryA
1 00233360 kernel32.dll 013D GetCurrentProcessId
1 00233364 kernel32.dll 013F GetCurrentThreadId
1 00233368 kernel32.dll 0140 GetDateFormatA
1 0023336C kernel32.dll 0146 GetDiskFreeSpaceA
1 00233370 kernel32.dll 014C GetDriveTypeA
1 00233374 kernel32.dll 014E GetEnvironmentStrings
1 00233378 kernel32.dll 0151 GetEnvironmentVariableA
1 0023337C kernel32.dll 0154 GetExitCodeThread
1 00233380 kernel32.dll 015C GetFileSize
1 00233384 kernel32.dll 015F GetFileType
1 00233388 kernel32.dll 0162 GetFullPathNameA
1 0023338C kernel32.dll 0169 GetLastError
1 00233390 kernel32.dll 016B GetLocalTime
1 00233394 kernel32.dll 016C GetLocaleInfoA
1 00233398 kernel32.dll 0174 GetModuleFileNameA
1 0023339C kernel32.dll 0176 GetModuleHandleA
1 002333A0 kernel32.dll 018B GetOEMCP
1 002333A4 kernel32.dll 0198 GetProcAddress
1 002333A8 kernel32.dll 019B GetProcessHeap
1 002333AC kernel32.dll 01AD GetStartupInfoA
1 002333B0 kernel32.dll 01AF GetStdHandle
1 002333B4 kernel32.dll 01B1 GetStringTypeExA
1 002333B8 kernel32.dll 01B3 GetStringTypeW
1 002333BC kernel32.dll 01B9 GetSystemInfo
1 002333C0 kernel32.dll 01BC GetSystemTime
1 002333C4 kernel32.dll 01CD GetThreadLocale
1 002333C8 kernel32.dll 01D2 GetTickCount
1 002333CC kernel32.dll 01D5 GetTimeZoneInformation
1 002333D0 kernel32.dll 01DB GetVersion
1 002333D4 kernel32.dll 01DC GetVersionExA
1 002333D8 kernel32.dll 01E9 GlobalAddAtomA
1 002333DC kernel32.dll 01EB GlobalAlloc
1 002333E0 kernel32.dll 01ED GlobalDeleteAtom
1 002333E4 kernel32.dll 01EE GlobalFindAtomA
1 002333E8 kernel32.dll 01F2 GlobalFree
1 002333EC kernel32.dll 01F5 GlobalHandle
1 002333F0 kernel32.dll 01F6 GlobalLock
1 002333F4 kernel32.dll 01F9 GlobalReAlloc
1 002333F8 kernel32.dll 01FD GlobalUnlock
1 002333FC kernel32.dll 0203 HeapAlloc
1 00233400 kernel32.dll 0209 HeapFree
1 00233404 kernel32.dll 0216 InitializeCriticalSection
1 00233408 kernel32.dll 021A InterlockedDecrement
1 0023340C kernel32.dll 021B InterlockedExchange
1 00233410 kernel32.dll 021E InterlockedIncrement
1 00233414 kernel32.dll 0229 IsDBCSLeadByte
1 00233418 kernel32.dll 0234 LCMapStringA
1 0023341C kernel32.dll 0241 LeaveCriticalSection
1 00233420 kernel32.dll 0242 LoadLibraryA
1 00233424 kernel32.dll 0243 LoadLibraryExA
1 00233428 kernel32.dll 0247 LoadResource
1 0023342C kernel32.dll 0248 LocalAlloc
1 00233430 kernel32.dll 024C LocalFree
1 00233434 kernel32.dll 0255 LockResource
1 00233438 kernel32.dll 0258 MapViewOfFile
1 0023343C kernel32.dll 025A Module32First
1 00233440 kernel32.dll 025C Module32Next
1 00233444 kernel32.dll 0264 MulDiv
1 00233448 kernel32.dll 0265 MultiByteToWideChar
1 0023344C kernel32.dll 0275 OpenProcess
1 00233450 kernel32.dll 027C OutputDebugStringA
1 00233454 kernel32.dll 0297 RaiseException
1 00233458 kernel32.dll 02A4 ReadFile
1 0023345C kernel32.dll 02A7 ReadProcessMemory
1 00233460 kernel32.dll 02BD ResetEvent
1 00233464 kernel32.dll 02C5 RtlUnwind
1 00233468 kernel32.dll 02DC SetConsoleCtrlHandler
1 0023346C kernel32.dll 02F8 SetCurrentDirectoryA
1 00233470 kernel32.dll 02FE SetEndOfFile
1 00233474 kernel32.dll 02FF SetEnvironmentVariableA
1 00233478 kernel32.dll 0301 SetErrorMode
1 0023347C kernel32.dll 0302 SetEvent
1 00233480 kernel32.dll 0307 SetFilePointer
1 00233484 kernel32.dll 0255 LockResource
1 00233488 kernel32.dll 02BF SetLastError
1 0023348C kernel32.dll 032D SetThreadLocale
1 00233490 kernel32.dll 033E SizeofResource
1 00233494 kernel32.dll 033F Sleep
1 00233498 kernel32.dll 0348 TerminateThread
1 0023349C kernel32.dll 034C TlsAlloc
1 002334A0 kernel32.dll 034D TlsFree
1 002334A4 kernel32.dll 034E TlsGetValue
1 002334A8 kernel32.dll 034F TlsSetValue
1 002334AC kernel32.dll 0358 UnhandledExceptionFilter
1 002334B0 kernel32.dll 035B UnmapViewOfFile
1 002334B4 kernel32.dll 036B VirtualAlloc
1 002334B8 kernel32.dll 036E VirtualFree
1 002334BC kernel32.dll 0371 VirtualProtect
1 002334C0 kernel32.dll 0373 VirtualQuery
1 002334C4 kernel32.dll 037B WaitForSingleObject
1 002334C8 kernel32.dll 037F WideCharToMultiByte
1 002334CC kernel32.dll 038C WriteFile
1 002334D0 kernel32.dll 03A4 lstrcat
1 002334D4 kernel32.dll 03A7 lstrcmp
1 002334D8 kernel32.dll 03AD lstrcpy
1 002334DC kernel32.dll 03B0 lstrcpyn
1 002334E0 kernel32.dll 03B3 lstrlen
FThunk: 002334F8 NbFunc: 00000003
1 002334F8 version.dll 0001 GetFileVersionInfoA
1 002334FC version.dll 0002 GetFileVersionInfoSizeA
1 00233500 version.dll 000B VerQueryValueA
FThunk: 00233540 NbFunc: 0000000D
1 00233540 wsock32.dll 0065 WSAAsyncSelect
1 00233544 wsock32.dll 0074 WSACleanup
1 00233548 wsock32.dll 006F WSAGetLastError
1 0023354C wsock32.dll 0073 WSAStartup
1 00233550 wsock32.dll 0003 closesocket
1 00233554 wsock32.dll 0004 connect
1 00233558 wsock32.dll 0008 htonl
1 0023355C wsock32.dll 0009 htons
1 00233560 wsock32.dll 000A inet_addr
1 00233564 wsock32.dll 000C ioctlsocket
1 00233568 wsock32.dll 0010 recv
1 0023356C wsock32.dll 0013 send
1 00233570 wsock32.dll 0017 socket
FThunk: 002335E4 NbFunc: 0000001A
1 002335E4 comctl32.dll 0027 ImageList_Add
1 002335E8 comctl32.dll 002A ImageList_BeginDrag
1 002335EC comctl32.dll 002C ImageList_Create
1 002335F0 comctl32.dll 002D ImageList_Destroy
1 002335F4 comctl32.dll 002E ImageList_DragEnter
1 002335F8 comctl32.dll 002F ImageList_DragLeave
1 002335FC comctl32.dll 0030 ImageList_DragMove
1 00233600 comctl32.dll 0031 ImageList_DragShowNolock
1 00233604 comctl32.dll 0032 ImageList_Draw
1 00233608 comctl32.dll 0033 ImageList_DrawEx
1 0023360C comctl32.dll 0036 ImageList_EndDrag
1 00233610 comctl32.dll 0037 ImageList_GetBkColor
1 00233614 comctl32.dll 0038 ImageList_GetDragImage
1 00233618 comctl32.dll 003A ImageList_GetIcon
1 0023361C comctl32.dll 003B ImageList_GetIconSize
1 00233620 comctl32.dll 003C ImageList_GetImageCount
1 00233624 comctl32.dll 003D ImageList_GetImageInfo
1 00233628 comctl32.dll 0043 ImageList_Read
1 0023362C comctl32.dll 0044 ImageList_Remove
1 00233630 comctl32.dll 0045 ImageList_Replace
1 00233634 comctl32.dll 0046 ImageList_ReplaceIcon
1 00233638 comctl32.dll 004B ImageList_SetBkColor
1 0023363C comctl32.dll 004C ImageList_SetDragCursorImage
1 00233640 comctl32.dll 004F ImageList_SetIconSize
1 00233644 comctl32.dll 0052 ImageList_Write
1 00233648 comctl32.dll 0011 InitCommonControls
FThunk: 0023365C NbFunc: 00000002
1 0023365C comdlg32.dll 0065 ChooseColorA
1 00233660 comdlg32.dll 006E GetOpenFileNameA
FThunk: 002337AC NbFunc: 00000050
1 002337AC gdi32.dll 0013 BitBlt
1 002337B0 gdi32.dll 0022 CombineRgn
1 002337B4 gdi32.dll 0024 CopyEnhMetaFileA
1 002337B8 gdi32.dll 0028 CreateBitmap
1 002337BC gdi32.dll 002A CreateBrushIndirect
1 002337C0 gdi32.dll 002D CreateCompatibleBitmap
1 002337C4 gdi32.dll 002E CreateCompatibleDC
1 002337C8 gdi32.dll 0033 CreateDIBSection
1 002337CC gdi32.dll 0034 CreateDIBitmap
1 002337D0 gdi32.dll 003B CreateFontIndirectA
1 002337D4 gdi32.dll 0040 CreateHalftonePalette
1 002337D8 gdi32.dll 0046 CreatePalette
1 002337DC gdi32.dll 0049 CreatePenIndirect
1 002337E0 gdi32.dll 004C CreateRectRgn
1 002337E4 gdi32.dll 0051 CreateSolidBrush
1 002337E8 gdi32.dll 008D DeleteDC
1 002337EC gdi32.dll 008E DeleteEnhMetaFile
1 002337F0 gdi32.dll 0090 DeleteObject
1 002337F4 gdi32.dll 0095 Ellipse
1 002337F8 gdi32.dll 00D8 ExcludeClipRect
1 002337FC gdi32.dll 00D9 ExtCreatePen
1 00233800 gdi32.dll 00DE ExtTextOutA
1 00233804 gdi32.dll 011C GdiFlush
1 00233808 gdi32.dll 014B GetBitmapBits
1 0023380C gdi32.dll 0151 GetBrushOrgEx
1 00233810 gdi32.dll 0161 GetClipBox
1 00233814 gdi32.dll 0166 GetCurrentPositionEx
1 00233818 gdi32.dll 0168 GetDCOrgEx
1 0023381C gdi32.dll 016A GetDIBColorTable
1 00233820 gdi32.dll 016B GetDIBits
1 00233824 gdi32.dll 016C GetDeviceCaps
1 00233828 gdi32.dll 0172 GetEnhMetaFileBits
1 0023382C gdi32.dll 0175 GetEnhMetaFileHeader
1 00233830 gdi32.dll 0176 GetEnhMetaFilePaletteEntries
1 00233834 gdi32.dll 0196 GetObjectA
1 00233838 gdi32.dll 019B GetPaletteEntries
1 0023383C gdi32.dll 019D GetPixel
1 00233840 gdi32.dll 01A5 GetRgnBox
1 00233844 gdi32.dll 01A6 GetStockObject
1 00233848 gdi32.dll 01AA GetSystemPaletteEntries
1 0023384C gdi32.dll 01B0 GetTextColor
1 00233850 gdi32.dll 01B5 GetTextExtentPoint32A
1 00233854 gdi32.dll 01B7 GetTextExtentPointA
1 00233858 gdi32.dll 01BD GetTextMetricsA
1 0023385C gdi32.dll 01C2 GetWinMetaFileBits
1 00233860 gdi32.dll 01C4 GetWindowOrgEx
1 00233864 gdi32.dll 01C8 IntersectClipRect
1 00233868 gdi32.dll 01CE LineTo
1 0023386C gdi32.dll 01CF MaskBlt
1 00233870 gdi32.dll 01D2 MoveToEx
1 00233874 gdi32.dll 01DE PatBlt
1 00233878 gdi32.dll 01E0 Pie
1 0023387C gdi32.dll 01E1 PlayEnhMetaFile
1 00233880 gdi32.dll 01EB PolyPolyline
1 00233884 gdi32.dll 01EF Polyline
1 00233888 gdi32.dll 01F4 RealizePalette
1 0023388C gdi32.dll 01F6 RectVisible
1 00233890 gdi32.dll 01F7 Rectangle
1 00233894 gdi32.dll 0201 RestoreDC
1 00233898 gdi32.dll 0202 RoundRect
1 0023389C gdi32.dll 0208 SaveDC
1 002338A0 gdi32.dll 020F SelectObject
1 002338A4 gdi32.dll 0210 SelectPalette
1 002338A8 gdi32.dll 0216 SetBkColor
1 002338AC gdi32.dll 0217 SetBkMode
1 002338B0 gdi32.dll 021A SetBrushOrgEx
1 002338B4 gdi32.dll 021F SetDIBColorTable
1 002338B8 gdi32.dll 0223 SetEnhMetaFileBits
1 002338BC gdi32.dll 022C SetMapMode
1 002338C0 gdi32.dll 0232 SetPixel
1 002338C4 gdi32.dll 0236 SetROP2
1 002338C8 gdi32.dll 0239 SetStretchBltMode
1 002338CC gdi32.dll 023D SetTextColor
1 002338D0 gdi32.dll 023F SetViewportExtEx
1 002338D4 gdi32.dll 0240 SetViewportOrgEx
1 002338D8 gdi32.dll 0242 SetWinMetaFileBits
1 002338DC gdi32.dll 0243 SetWindowExtEx
1 002338E0 gdi32.dll 0244 SetWindowOrgEx
1 002338E4 gdi32.dll 024A StretchBlt
1 002338E8 gdi32.dll 0253 UnrealizeObject
FThunk: 002338FC NbFunc: 00000002
1 002338FC shell32.dll 0167 ShellExecuteA
1 00233900 shell32.dll 016D Shell_NotifyIcon
FThunk: 00233BD4 NbFunc: 000000B2
1 00233BD4 user32.dll 0001 ActivateKeyboardLayout
1 00233BD8 user32.dll 0003 AdjustWindowRectEx
1 00233BDC user32.dll 000E BeginPaint
1 00233BE0 user32.dll 001B CallNextHookEx
1 00233BE4 user32.dll 001C CallWindowProcA
1 00233BE8 user32.dll 0027 CharLowerA
1 00233BEC user32.dll 0028 CharLowerBuffA
1 00233BF0 user32.dll 002B CharNextA
1 00233BF4 user32.dll 0036 CharUpperBuffA
1 00233BF8 user32.dll 003A CheckMenuItem
1 00233BFC user32.dll 003D ChildWindowFromPoint
1 00233C00 user32.dll 0041 ClientToScreen
1 00233C04 user32.dll 0043 CloseClipboard
1 00233C08 user32.dll 0058 CreateIcon
1 00233C0C user32.dll 005E CreateMenu
1 00233C10 user32.dll 005F CreatePopupMenu
1 00233C14 user32.dll 0061 CreateWindowExA
1 00233C18 user32.dll 008A DefFrameProcA
1 00233C1C user32.dll 008C DefMDIChildProcA
1 00233C20 user32.dll 008F DefWindowProcA
1 00233C24 user32.dll 0092 DeleteMenu
1 00233C28 user32.dll 0096 DestroyCursor
1 00233C2C user32.dll 0096 DestroyCursor
1 00233C30 user32.dll 0098 DestroyMenu
1 00233C34 user32.dll 009A DestroyWindow
1 00233C38 user32.dll 00A2 DispatchMessageA
1 00233C3C user32.dll 00B3 DrawEdge
1 00233C40 user32.dll 00B4 DrawFocusRect
1 00233C44 user32.dll 00B6 DrawFrameControl
1 00233C48 user32.dll 00B7 DrawIcon
1 00233C4C user32.dll 00B8 DrawIconEx
1 00233C50 user32.dll 00B9 DrawMenuBar
1 00233C54 user32.dll 00BD DrawTextA
1 00233C58 user32.dll 00C2 EmptyClipboard
1 00233C5C user32.dll 00C3 EnableMenuItem
1 00233C60 user32.dll 00C4 EnableScrollBar
1 00233C64 user32.dll 00C5 EnableWindow
1 00233C68 user32.dll 00C9 EndPaint
1 00233C6C user32.dll 00CD EnumClipboardFormats
1 00233C70 user32.dll 00DC EnumThreadWindows
1 00233C74 user32.dll 00DF EnumWindows
1 00233C78 user32.dll 00E0 EqualRect
1 00233C7C user32.dll 00E3 FillRect
1 00233C80 user32.dll 00E4 FindWindowA
1 00233C84 user32.dll 00EA FrameRect
1 00233C88 user32.dll 00EC GetActiveWindow
1 00233C8C user32.dll 00F4 GetCapture
1 00233C90 user32.dll 00F6 GetCaretPos
1 00233C94 user32.dll 00F7 GetClassInfoA
1 00233C98 user32.dll 00F8 GetClassInfoExA
1 00233C9C user32.dll 00FD GetClassNameA
1 00233CA0 user32.dll 0100 GetClientRect
1 00233CA4 user32.dll 0102 GetClipboardData
1 00233CA8 user32.dll 0109 GetCursor
1 00233CAC user32.dll 010C GetCursorPos
1 00233CB0 user32.dll 010D GetDC
1 00233CB4 user32.dll 010E GetDCEx
1 00233CB8 user32.dll 010F GetDesktopWindow
1 00233CBC user32.dll 0112 GetDlgItem
1 00233CC0 user32.dll 0116 GetDoubleClickTime
1 00233CC4 user32.dll 0117 GetFocus
1 00233CC8 user32.dll 0118 GetForegroundWindow
1 00233CCC user32.dll 011B GetIconInfo
1 00233CD0 user32.dll 0120 GetKeyNameTextA
1 00233CD4 user32.dll 0122 GetKeyState
1 00233CD8 user32.dll 0123 GetKeyboardLayout
1 00233CDC user32.dll 0124 GetKeyboardLayoutList
1 00233CE0 user32.dll 0127 GetKeyboardState
1 00233CE4 user32.dll 0128 GetKeyboardType
1 00233CE8 user32.dll 0129 GetLastActivePopup
1 00233CEC user32.dll 012D GetMenu
1 00233CF0 user32.dll 0133 GetMenuItemCount
1 00233CF4 user32.dll 0134 GetMenuItemID
1 00233CF8 user32.dll 0135 GetMenuItemInfoA
1 00233CFC user32.dll 0138 GetMenuState
1 00233D00 user32.dll 0139 GetMenuStringA
1 00233D04 user32.dll 013D GetMessagePos
1 00233D08 user32.dll 013E GetMessageTime
1 00233D0C user32.dll 0146 GetParent
1 00233D10 user32.dll 014B GetPropA
1 00233D14 user32.dll 0156 GetScrollInfo
1 00233D18 user32.dll 0157 GetScrollPos
1 00233D1C user32.dll 0158 GetScrollRange
1 00233D20 user32.dll 015A GetSubMenu
1 00233D24 user32.dll 015D GetSystemMenu
1 00233D28 user32.dll 015E GetSystemMetrics
1 00233D2C user32.dll 0164 GetTopWindow
1 00233D30 user32.dll 016B GetWindow
1 00233D34 user32.dll 016D GetWindowDC
1 00233D38 user32.dll 016F GetWindowLongA
1 00233D3C user32.dll 0174 GetWindowPlacement
1 00233D40 user32.dll 0175 GetWindowRect
1 00233D44 user32.dll 0178 GetWindowTextA
1 00233D48 user32.dll 017C GetWindowThreadProcessId
1 00233D4C user32.dll 018B InflateRect
1 00233D50 user32.dll 018E InsertMenuA
1 00233D54 user32.dll 018F InsertMenuItemA
1 00233D58 user32.dll 0193 IntersectRect
1 00233D5C user32.dll 0194 InvalidateRect
1 00233D60 user32.dll 0197 IsCharAlphaA
1 00233D64 user32.dll 0198 IsCharAlphaNumericA
1 00233D68 user32.dll 019F IsChild
1 00233D6C user32.dll 01A1 IsDialogMessage
1 00233D70 user32.dll 01A7 IsIconic
1 00233D74 user32.dll 01A9 IsRectEmpty
1 00233D78 user32.dll 01AC IsWindow
1 00233D7C user32.dll 01AD IsWindowEnabled
1 00233D80 user32.dll 01B0 IsWindowVisible
1 00233D84 user32.dll 01B1 IsZoomed
1 00233D88 user32.dll 01B3 KillTimer
1 00233D8C user32.dll 01B6 LoadBitmapA
1 00233D90 user32.dll 01B8 LoadCursorA
1 00233D94 user32.dll 01BC LoadIconA
1 00233D98 user32.dll 01C0 LoadKeyboardLayoutA
1 00233D9C user32.dll 01C9 LoadStringA
1 00233DA0 user32.dll 01D4 MapVirtualKeyA
1 00233DA4 user32.dll 01D8 MapWindowPoints
1 00233DA8 user32.dll 01DC MessageBeep
1 00233DAC user32.dll 01DD MessageBoxA
1 00233DB0 user32.dll 01EF OemToCharA
1 00233DB4 user32.dll 01F3 OffsetRect
1 00233DB8 user32.dll 01F4 OpenClipboard
1 00233DBC user32.dll 01FE PeekMessageA
1 00233DC0 user32.dll 0200 PostMessageA
1 00233DC4 user32.dll 0202 PostQuitMessage
1 00233DC8 user32.dll 020C PtInRect
1 00233DCC user32.dll 0216 RedrawWindow
1 00233DD0 user32.dll 0217 RegisterClassA
1 00233DD4 user32.dll 0218 RegisterClassExA
1 00233DD8 user32.dll 021B RegisterClipboardFormatA
1 00233DDC user32.dll 021B RegisterClipboardFormatA
1 00233DE0 user32.dll 022A ReleaseCapture
1 00233DE4 user32.dll 022B ReleaseDC
1 00233DE8 user32.dll 022C RemoveMenu
1 00233DEC user32.dll 022D RemovePropA
1 00233DF0 user32.dll 0232 ScreenToClient
1 00233DF4 user32.dll 0235 ScrollWindow
1 00233DF8 user32.dll 0236 ScrollWindowEx
1 00233DFC user32.dll 023C SendMessageA
1 00233E00 user32.dll 0244 SetActiveWindow
1 00233E04 user32.dll 0245 SetCapture
1 00233E08 user32.dll 0248 SetClassLongA
1 00233E0C user32.dll 024B SetClipboardData
1 00233E10 user32.dll 024E SetCursor
1 00233E14 user32.dll 0257 SetFocus
1 00233E18 user32.dll 0258 SetForegroundWindow
1 00233E1C user32.dll 025A SetKeyboardState
1 00233E20 user32.dll 025E SetMenu
1 00233E24 user32.dll 0263 SetMenuItemInfoA
1 00233E28 user32.dll 026B SetPropA
1 00233E2C user32.dll 026D SetRect
1 00233E30 user32.dll 026F SetScrollInfo
1 00233E34 user32.dll 0270 SetScrollPos
1 00233E38 user32.dll 0271 SetScrollRange
1 00233E3C user32.dll 027B SetTimer
1 00233E40 user32.dll 0281 SetWindowLongA
1 00233E44 user32.dll 0283 SetWindowPlacement
1 00233E48 user32.dll 0284 SetWindowPos
1 00233E4C user32.dll 0287 SetWindowTextA
1 00233E50 user32.dll 028B SetWindowsHookExA
1 00233E54 user32.dll 028F ShowCursor
1 00233E58 user32.dll 0290 ShowOwnedPopups
1 00233E5C user32.dll 0291 ShowScrollBar
1 00233E60 user32.dll 0293 ShowWindow
1 00233E64 user32.dll 029A SystemParametersInfoA
1 00233E68 user32.dll 02A5 TrackPopupMenu
1 00233E6C user32.dll 02AA TranslateMDISysAccel
1 00233E70 user32.dll 02AB TranslateMessage
1 00233E74 user32.dll 02AF UnhookWindowsHookEx
1 00233E78 user32.dll 02B0 UnionRect
1 00233E7C user32.dll 02B4 UnregisterClassA
1 00233E80 user32.dll 02BC UpdateWindow
1 00233E84 user32.dll 02C6 ValidateRect
1 00233E88 user32.dll 02D1 WaitMessage
1 00233E8C user32.dll 02D3 WinHelpA
1 00233E90 user32.dll 02D6 WindowFromPoint
1 00233E94 user32.dll 02D9 wsprintfA
1 00233E98 user32.dll 015B GetSysColor
FThunk: 00233EB0 NbFunc: 00000003
1 00233EB0 ole32.dll 0012 CoCreateInstance
1 00233EB4 ole32.dll 003C CoInitialize
1 00233EB8 ole32.dll 006A CoUninitialize
FThunk: 00233F0C NbFunc: 00000012
1 00233F0C oleaut32.dll 00CA CreateErrorInfo
1 00233F10 oleaut32.dll 00C8 GetErrorInfo
1 00233F14 oleaut32.dll 000F SafeArrayCreate
1 00233F18 oleaut32.dll 0019 SafeArrayGetElement
1 00233F1C oleaut32.dll 0014 SafeArrayGetLBound
1 00233F20 oleaut32.dll 0013 SafeArrayGetUBound
1 00233F24 oleaut32.dll 0094 SafeArrayPtrOfIndex
1 00233F28 oleaut32.dll 001A SafeArrayPutElement
1 00233F2C oleaut32.dll 0028 SafeArrayRedim
1 00233F30 oleaut32.dll 00C9 SetErrorInfo
1 00233F34 oleaut32.dll 0004 SysAllocStringLen
1 00233F38 oleaut32.dll 0006 SysFreeString
1 00233F3C oleaut32.dll 0005 SysReAllocStringLen
1 00233F40 oleaut32.dll 000C VariantChangeType
1 00233F44 oleaut32.dll 0009 VariantClear
1 00233F48 oleaut32.dll 000A VariantCopy
1 00233F4C oleaut32.dll 000B VariantCopyInd
1 00233F50 oleaut32.dll 0008 VariantInit
能力值:
( LV9,RANK:850 )
3 楼
饿也不知道对不对``反正程序不能正确运行就是了!
你知道是BC的程序?``你把壳脱了么?`
是的话请传上来一下`谢~~~~~~~~急用`
能力值:
(RANK:990 )
4 楼
文件删除。
能力值:
( LV9,RANK:3410 )
5 楼
用ImportREC修复输入表还是需要自己完成的
调试一下看看为何无法运行
能力值:
( LV9,RANK:850 )
6 楼
谢CC`1``
已经下完``可以删了!!
能力值:
( LV9,RANK:850 )
7 楼
对了``CC你是怎么解决的`
能力值:
(RANK:990 )
8 楼
我直接手脱的。yoda's Protector 的保护主要有这几点:
1、锁键盘鼠标,可以通过断 BlockInput 解决。
2、父进程检测,可以通过断 bp CreateFileA,F9几次,当看到堆栈中出现如
0012EAF4 008D56B9 |FileName = "\\.\NTICE"
这样的内容时返回,找到相应位置后改掉。
3、锁任务栏,可以通过设bp GetWindowLongA,断下来后记下相应值,当调用SetWindowLongA时改堆栈来去掉这个保护。
4、输入表加密可以通过断bp GetProcAddress,返回后NOP掉相应处的加密代码,等输入表处理完了再恢复。
5、时间校验,通过断bp GetTickCount来改。
最后这个程序是C++Builder的,输入表不连续,要自己确定IAT的起始地址和大小。以前我脱一个yada的壳时曾经做过笔记,不过论坛上有很多这个壳的教程,我就不贴出来了。
能力值:
( LV2,RANK:10 )
9 楼
Version: ASProtect 2.3 SKE build 04.26 Beta [3]
我有一个软件脱壳脱壳了好久,都没成功 555
能力值:
( LV9,RANK:850 )
10 楼
谢了``可以手动脱掉
因本人是壳盲``所以程序还是无法正确运行!~!呵呵``
``
能力值:
( LV2,RANK:10 )
11 楼
iat是怎么找到的啊,
bc的iat好乱,有什么巧吗?
说下方法好吗?感激不尽!