-
-
[旧帖]
[求助]加壳程序OD载入后>cpu>模块>双击主程序>查找参考,找不到正确字符串
0.00雪花
-
发表于:
2009-3-3 18:54
2926
-
[旧帖] [求助]加壳程序OD载入后>cpu>模块>双击主程序>查找参考,找不到正确字符串
0.00雪花
壳aspack.
我换了个版本的od就行了.是哪里设置的问题?
我不想换的.都看习惯了原来的版本了.
我用的版本,OD载入后>cpu>模块>双击主程序>查找参考
004C662B mov dword ptr [ebp-4], 10000 UNICODE "=::=::\"
004C6712 cmp dword ptr [ebp-4], 10000 UNICODE "=::=::\"
004DB375 cmp dword ptr [ebp+8], 10000 UNICODE "=::=::\"
004DB385 mov dword ptr [eax+18], 10000 UNICODE "=::=::\"
004DC183 push 10040 UNICODE "tings\Administrator"
004E6F36 cmp dword ptr [ebp-28], 10000 UNICODE "=::=::\"
004EB4F1 imul esi, dword ptr fs:[esp+eax+3], 1 UNICODE "=::=::\"
004ECD71 imul edi, dword ptr [edx+65], 0042667 ASCII "xfB"
004ED003 push 004ED018 ASCII "[Y]胦pen"
004ED700 mov edx, 004ED7D0 ASCII "werwfswfwerwe"
004ED70D mov ecx, 004ED7E8 ASCII "eiertw242etgd"
004ED732 mov ecx, 004ED7E8 ASCII "eiertw242etgd"
004ED757 mov ecx, 004ED7E8 ASCII "eiertw242etgd"
004ED77C mov ecx, 004ED7E8 ASCII "eiertw242etgd"
004ED8BF mov eax, 004ED960 ASCII "Register succeed! Thank you for you support!"
另一版本
004ECD71 imul edi,dword ptr ds:[edx+65],Hide_Pri. ASCII "xfB"
004ECFE8 push Hide_Pri.004ED01C ASCII "open"
004ED08D mov edx,Hide_Pri.004ED0CC ASCII "Welcome to Sunisoft"
004ED099 mov edx,Hide_Pri.004ED0E8 ASCII "http://www.sunisoft.com"
004ED4E9 mov eax,Hide_Pri.004ED558 ASCII "Register succeed! Thank you for you support!"
004ED515 mov eax,Hide_Pri.004ED590 ASCII "User Name or Key error! Register faild!"
004ED658 mov edx,Hide_Pri.004ED6D0 ASCII "\systimer.ini"
004ED700 mov edx,Hide_Pri.004ED7D0 ASCII "werwfswfwerwe"
004ED70D mov ecx,Hide_Pri.004ED7E8 ASCII "eiertw242etgd"
004ED732 mov ecx,Hide_Pri.004ED7E8 ASCII "eiertw242etgd"
004ED757 mov ecx,Hide_Pri.004ED7E8 ASCII "eiertw242etgd"
004ED77C mov ecx,Hide_Pri.004ED7E8 ASCII "eiertw242etgd"
004ED8BF mov eax,Hide_Pri.004ED960 ASCII "Register succeed! Thank you for you support!"
我用的版本里就找不到User Name or Key error! Register faild!".还一堆乱码.还了好多.
怎样解决呢?
3q
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
