首页
社区
课程
招聘
[旧帖] [求助]求助~~~~~~~~ 0.00雪花
发表于: 2007-8-18 11:26 4143

[旧帖] [求助]求助~~~~~~~~ 0.00雪花

2007-8-18 11:26
4143
我W32Dasm  查看的字符串是乱码的

还有什么办法找到 它关键跳转的地方

" G@"
"        ?"
"        g繬HNOUL樦娗X衏OU"
""
""=鸂h?"
"&&H"
"&&愊8"
"&&謭愊"
"** "
"*g/T≧8nb"
",g沜皊騗蟸6e9?"
"`O皊(W颯錘悥蠀8nb"
"||`"
"000"
"0000"
"0W
N%"
"8nb%"
"CCONJURE.MAK"
"CCwfh"
"CCwfhc"
"CCwsmd"
"CCwsmdc"
"CCwzcs"
"CCwzcsc"
"CQ%"
"DD?
"EElementClient Window"
"EElementClient"
"EError"
"FF1"
"FF2"
"FF3"
"FF4"
"FF5"
"FF6"
"FF7"
"FF8"
"FFzhu1"
"FFzhu1c"
"FFzhu2"
"FFzhu2c"
"FFzhu3"
"FFzhu3c"
"FFzhu4"
"FFzhu4c"
"FFzhu5"
"FFzhu5c"
"FFzhu6"
"FFzhu6c"
"FFzhu7"
"FFzhu7c"
"GGjjn1"
"GGjjn1c"
"GGjjn2"
"GGjjn2c"
"GGjjn3"
"GGjjn3c"
"GGjjn4"
"GGjjn4c"
"GGjjn5"
"GGjjn5c"
"HH%P:"
"HHKEY_"
"HHKEY_CLASSES_ROOT"
"HHKEY_CURRENT_CONFIG"
"HHKEY_CURRENT_USER"
"HHKEY_DYN_DATA"
"HHKEY_LOCAL_MACHINE"
"HHKEY_LOCAL_MACHINE\Software"
"HHKEY_PERFORMANCE_DATA"
"HHKEY_USERS"
"hhpload1"
"hhploadc"
"hhploadt"
"hhploadtc"
"hhttp://yhjfirst.5d6d.com"
"hT鬡%"
"I{%"
"IID"
"IIncorrect Format:"
"iRYO%"
"JJbulan"
"JJbulanc"
"JJbuxue"
"JJbuxuec"
"JJwp"
"MM%P:"
"mmpload1"
"mmploadc"
"MMploadt"
"mmploadt"
"mmploadtc"
"O?檉??"
"PD@"
"PL@"
"S_MR%"
"Sb%"
"VB5!6&vb6chs.dll"
"淐@"
"浱翼X逑G€籜麾茡,>湾徦F??a覡台挋u%RG弢J?
"燵ir%"
"褢%"
"镹?檉??"
"鵑?檉??"
"鐍韣%"
"蟸%"
"騗蟸悥蠀8nb梲鉙"
"酦?檉??"
"麮@"
"鑜孮"
"衏:y"
"馧?檉??"
"註@"
"        g搹eQ鑜孮x"
"Am謯荴 "
"%?@"
"%@"

[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法

收藏
免费 0
支持
分享
最新回复 (7)
雪    币: 424
活跃值: (10)
能力值: ( LV9,RANK:850 )
在线值:
发帖
回帖
粉丝
2
VB程序找不到字符串,用VBEXplorer
2007-8-18 11:27
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
谢谢,我试试
2007-8-18 11:29
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
不会用这个...
2007-8-18 11:35
0
雪    币: 208
活跃值: (10)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
5
下API断点,比如MessageBoxW,GetWindowTextW之类
2007-8-18 11:59
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
先脱壳,
   PEid查看是那种语言,
如果是vb,用VBExplorer、GetVBRes、SmatCheck工具找关键!
如果是delphi,用DEDE、PE Explorer工具找关键
在不然,那就下断点吧!
bp GetDlgItem(断输入框)
bp MessageBoxA(断对话框)
注意一点就是vb语言用bp rtcMsgbox(断对话框)    才能断下的

        good luck !
2007-8-18 12:28
0
雪    币: 424
活跃值: (10)
能力值: ( LV9,RANK:850 )
在线值:
发帖
回帖
粉丝
7
中午做的VBExplorer工具使用动画
动画慢了一点`将就看!
上传的附件:
2007-8-18 14:28
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
LZ侵犯别人版权哦.....
2007-11-17 17:10
0
游客
登录 | 注册 方可回帖
返回
//