-
-
[求助]为何paimei有时不产生debugger hit ?
-
发表于:
2008-12-2 16:29
11578
-
[求助]为何paimei有时不产生debugger hit ?
看failwest的第12章时安装了paimei并按照书中例子做了试验，ok一切完好。如下所示，
............................................................................................
..............................................................................................
Loading 0x58fb0000 \WINDOWS\AppPatch\AcGenral.dll
Loading 0x76b10000 \WINDOWS\system32\winmm.dll
Loading 0x76990000 \WINDOWS\system32\ole32.dll
Loading 0x770f0000 \WINDOWS\system32\oleaut32.dll
Loading 0x77bb0000 \WINDOWS\system32\msacm32.dll
Loading 0x77bd0000 \WINDOWS\system32\version.dll
Loading 0x759d0000 \WINDOWS\system32\userenv.dll
Loading 0x5adc0000 \WINDOWS\system32\uxtheme.dll
Loading 0x76300000 \WINDOWS\system32\imm32.dll
Loading 0x62c20000 \WINDOWS\system32\lpk.dll
Loading 0x73fa0000 \WINDOWS\system32\usp10.dll
Loading 0x77180000 \WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
debugger hit 01012475 cc #1
debugger hit 010127c8 cc #2
debugger hit 010127c2 cc #3
debugger hit 010127b0 cc #4
debugger hit 010128dc cc #5
debugger hit 010127aa cc #6
。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。
。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。
但是在用一个别的程序进行相同的步骤时发现要本不产生那堆debugger hit .............而只是显示加载的dll，如下 ：
Stalking module crackme.exe
Loading 0x7c920000 \WINDOWS\system32\ntdll.dll
Loading 0x7c800000 \WINDOWS\system32\kernel32.dll
Loading 0x77d10000 \WINDOWS\system32\user32.dll
Loading 0x77ef0000 \WINDOWS\system32\gdi32.dll
Loading 0x5d170000 \WINDOWS\system32\comctl32.dll
Loading 0x77da0000 \WINDOWS\system32\advapi32.dll
Loading 0x77e50000 \WINDOWS\system32\rpcrt4.dll
Loading 0x76320000 \WINDOWS\system32\comdlg32.dll
Loading 0x77f40000 \WINDOWS\system32\shlwapi.dll
Loading 0x77be0000 \WINDOWS\system32\msvcrt.dll
Loading 0x773a0000 \WINDOWS\system32\shell32.dll
Loading 0x76300000 \WINDOWS\system32\imm32.dll
Loading 0x62c20000 \WINDOWS\system32\lpk.dll
Loading 0x73fa0000 \WINDOWS\system32\usp10.dll
Loading 0x77180000 \WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
Loading 0x5adc0000 \WINDOWS\system32\uxtheme.dll
Loading 0x74680000 \WINDOWS\system32\MSCTF.dll
Loading 0x77bd0000 \WINDOWS\system32\version.dll
Loading 0x73640000 \WINDOWS\system32\MSCTFIME.IME
Loading 0x76990000 \WINDOWS\system32\ole32.dll
Loading 0x60800000 \WINDOWS\system32\mslbui.dll
Function coverage at 0%. Basic block coverage at 0%.
[!] No available connection to uDraw(Graph) server.
奈何？
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
