首页
社区
课程
招聘
[旧帖] [求助]给位帮我分析下这段代码. 0.00雪花
发表于: 2009-10-24 04:18 1765

[旧帖] [求助]给位帮我分析下这段代码. 0.00雪花

2009-10-24 04:18
1765
String Resource ID=00101: "s?MyMacro(&A)..."
String Resource ID=00110: "0x14
<CapsLock>
0x10
<Shift>
0x11
<Ctrl>
0x12
<Alt>
0x5b
<Wi"
String Resource ID=00119: "        .緐(%d?戗gL b?,"
String Resource ID=61942: "镥隁I剠?
String Resource ID=61943: "緉(U9)"
String Resource ID=61948: "款D錦?嚇筈?"
String Resource ID=61963: ":?緉H ?
String Resource ID=61964: "?w l鲰.!頜
/Windows98學indowsME蚛"
String Resource ID=61983: "
?(?"
String Resource ID=61986: "鑼?骼濞/&cn揺"
String Resource ID=61987: "
鸘(,o鰟(7G斣??? (7??(,o?(7(,o鰟L::??h鑵箘わ
"
String Resource ID=61991: "緉"
String Resource ID=61992: "?"
String Resource ID=61993: "o鲷"
String Resource ID=62001: "setup.exe"
String Resource ID=62002: "?隁I剠?
String Resource ID=62056: "%d"
String Resource ID=62058: "o??%?熰稞/
1.嗾窏o稣(醥
2.?燒爙1%
魍?╫鲢迟*顦
?"
String Resource ID=62061: "/?s 俓/珥%s -b%s"
String Resource ID=62062: "<?"
String Resource ID=62064: "ňn剠过玝
:丐 n?"
String Resource ID=62065: "蚛1%镢20傱嗾蕙0o鰟屃


顦1. ,o鲟誘Q
愠拐鱯?k?A?"
String Resource ID=62068: "G?% 嗾珥(!
魍?╫鲔LG?T?旆?
String Resource ID=62069: "o鳅??稞?
1o鰧
1晦?
2o?v?
(
3o鯻O

魍??
String Resource ID=62070: "c(鑼"
String Resource ID=62071: "鑼"
String Resource ID=62072: "鑼?
String Resource ID=62073: ""
String Resource ID=62074: "軽緉?"
String Resource ID=62075: "??稞q蚾鯿8( 镢%d
魉;T?煦迟*顦"
"   ===> "
"  "
"         "
" & ")"
"
" & CStr(Param%d)"
" ?>"
" = "
" >"
" 3_6?"
" HTTP/1.1
"
"         
"
"         ,"
"        "
"
"
"
bit length overflow
"
"
"
"

Call Stack:
"
"

Code Before:
"
"

Current Modules:"
"
"
"
==>"
"
Current Code:
"
"
Registers:
EAX=%08X EBX=%08X "
"
"
"!!"
""
""
""
""
""
""
"--"
""""
"#         "
"##"
"#%d"
"#CDATA"
"#COMMENT"
"$$"
"%02X "
"%02X"
"%08d"
"%08X"
"%1"
"%c"
"%d"
"%d%%"
"%s = %s.%s("
"%s = QMEngine.PluginCall(CallCommand)
"
"%s must be closed with </%s>"
"%s"
"%u"
"%W%Y"
"%X"
"%X"
"%x"
"& ",""
"&pass=%08d"
"&randcode="
"&xjl="
"(("
")
"
"))"
"**"
"**************************"
",,"
".."
"../"
"..\"
".\script\"
".api"
".arc"
".arj"
".dll"
".down"
".exe"
".gz"
".htm"
".ini"
".lzh"
".text"
".tgz"
".tmp"
".txt"
".vbs"
".Z"
".zip"
".zoo"
"//"
"/vrb/chkolv9.aspx?lan=chs"
"://"
"::"
":\"
"??"
"?M"
"?M"
"?M"
"?M"
"?M"
"?M"
"?M"
"?M"
"?鵏"
"?鶯"
"[         ]*((((\([^\(\)]*\))|("[^"]*")|([^"\),]))+)|"
"[         ]*((,[         ]*(((\([^\(\)]*\))|("[^"]*")|([^"\)"
"[%08X] = %08X
"
"[%s]"
"[["
"\\"
"\\.\hkSymbolicLink"
"\\.\PhysicalDrive0"
"\\.\tlgpp"
"\CLSID\{EBEB87A4-E151-4054-AB45-A6E094C5334B}\"
"\drivers\kbdclass.sys"
"\n"
"\plugin"
"\plugin\"
"\QMDispatch.dll"
"\QMDispatch.QMFunction\CLSID\"
"\shell\open\command"
"\SOFTWARE\Microsoft\Internet Explorer\RN"
"\SOFTWARE\Microsoft\Internet Explorer\Ver"
"\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"\system32\win32k.sys"
"\tmpad.xml"
"\tmpad-down.xml"
"\winhlp32.exe"
"]]"
"^^"
"__"
"{{"
"{TempDir}\"
"{WindowsDir}\"
"||"
"}}"
"++"
"<%c>"
"'<%s> ... </%s>' is not wel-formed."
"<%s> attribute has error "
"<<"
"<Ctrl>"
"<L Alt>"
"<L Ctrl>"
"<L Shift>"
"<Print Screen>"
"<R Ctrl>"
"<R Shift>"
"<Shift>"
"=="
">>"
"€g膜烮粁"
"00 00 00 00 00 00 00 00"
"0123456789"
"0x%x
"
"11"
"12345678"
"33 D2 66 8B 53 24 52 FF D6 F6 "
"44`窒9\V?Х牿銵榱R?(曔箱著"
"4A 44 59 5F 47 45 54 4C 41 53 "
"4A 44 59 5F 48 4F 54 4B 45 59 "
"4A 44 59"
"63 6E 2F 71 6D 61 63 72 6F 2F "
"66"
"68 6B 6A 64 79 53 79 6D 62 6F "
"6a 64 79 23 68 6F 6F 6B"
"7.10.4422"
"71 73 65 66 79 6A 69 6C"
"A`"
"aa"
"Accept: */*
"
"adcon\"
"Address = 0x%X"
"ads"
"ae"
"Alt+"
"Arial"
"Attachment"
"Attachment:\"
"Authorization: Basic "
"AutoRun"
"AutoRunTime"
"background.bmp"
"bad exception"
"bad pack level"
"banner"
"BB"
"bb"
"Beep"
"BeginHotkey"
"begintime"
"bro.mymacro"
"bro_ads"
"c1.xdrj.cn"
"c2.xdrj.cn"
"Cache-Control: no-cache
"
"call "
"Call"
"CallCommand = "%s.%s(""
"CBool("
"CC"
"cc"
"Class CLASS_NAME_%s
"
"clickurl"
"Code too clever"
"Command not found."
"Comment"
"Connection: close
"
"CQMEngine"
"CQMEngineHost"
"CStr("
"CStr(%s)"
"ct_init: 256+dist != 512"
"ct_init: dist != 256"
"ct_init: length != 256"
"ct_tally: bad match"
"Ctrl+"
"dbghelp.dll"
"desc"
"Description"
"DescriptionANSI"
"DeviceIoControl(JDY_GETLASTKEY) "
"DeviceIoControl(JDY_HOTKEY_CLEAN) "
"Dim %s
"
"DISPLAY"
"display"
"DISPLAY"
"DllGetVersion"
"DllRegisterServer"
"dummy.dat"
"EE"
"ee"
"empty 00000000 tree with lengths"
"Enable"
"EnableWindow"
"End Class
"
"End Function
"
"EndHotkey"
"EndHotkeyMod"
"endtime"
"Error in thread safety code: could "
"Error opening ciphertext file!"
"Error opening plaintext file!"
"Error reading ciphertext!"
"error reading"
"ESI=%08X EDI=%08X ESP=%08X EBP=%08X"
"exit.exe"
"EXTERNAL"
"failure: CreateService! error "
"ff"
"File %s not found"
"FileName"
"FormSizeCX"
"FormSizeCY"
"Function %s("
"Gdi32.dll"
"General"
"GET "
"Get"
"Get_Plugin_Description"
"Get_Plugin_Interpret_Template"
"GetCommand"
"GetCommandCount"
"GetControlData"
"GetCursorInfo"
"GetFormatVersion"
"GetPluginDescription"
"GG"
"GGet_Plugin_Description"
"HEAD "
"hi@vrbrothers.com"
"HideScriptPage"
"HideSettingPage"
"homestead"
"Host: "
"Hotkey"
"HotkeyMode"
"http://"
"http://ad.vrbrothers.com/qmacro/v7/ad-mymacro."
"HttpDownload/2.0"
"IDispatch error #%d"
"If IsEmpty(%s) Then : Set %s = "
"If IsEmpty(%s) Then
        Set %s = "
"incomplete 00000000 tree"
"incomplete dynamic bit lengths "
"incomplete literal/length tree"
"incorrect header check"
"Incorrect key length"
"invalid length"
"Invalid regular expression object"
"invalid vector<T> subscript"
"iphlpapi.dll"
"it must be closed with </%s>"
"jan,feb,mar,apr,may,jan,jul,aug,sep,oct,nov,de"
"kernel32.dll"
"LastLoginServer"
"last-modified:"
"LLLL"
"location:"
"MainWndTitle"
"metallic"
"mm control wnd"
"mm"
"mmlog.txt"
"MMRunning"
"MS Sans Serif"
"mymacro.htm"
"MyMacro_"
"MyMacroBasic"
"Name = %s, Base = 0x%X, Top = "
"need dictionary"
"newswndad"
"newswndurl"
"NN"
"nn"
"normalcolor"
"not enough codes"
"NtDeviceIoControlFile"
"NTDLL.DLL"
"NtLoadDriver"
"NtProtectVirtualMemory"
"NUL"
"On Error Resume Next:QMEngine.SetRunTimeParam "
"OnLoad"
"OnSave"
"OnScriptExit"
"OnScriptLoad"
"open"
"OpenThemeData"
"othersoft"
"Out of memory!
"
"Out of stack space, while attempting "
"oversubscribed literal/length "
"PAGE"
"Param%d"
"Param%d,"
"PauseHotkey"
"PauseHotkeyMod"
"Plugin not found."
"Plugin version error."
"pluginlist.txt"
"popup"
"PP"
"pp"
"Pragma: no-cache
"
"PrimaryMacro"
"ProcessPriority"
"Proxy-Authorization: Basic "
"Put"
"PutRef"
"QMCLV: 0003"
"QMDispatch.QMFunction"
"QMRoutine.VBSRoutine %u
"
"QQ"
"qsefyjil"
"Range: bytes=%d-
"
"rb"
"rb+"
"Referer: "
"RelativeFile"
"rename"
"rename"
"rename"
"Rename"
"RepeatTime"
"RepeatType"
"rr"
"RtlNtStatusToDosError"
"RunOnce"
"RunSpeed"
"SCount"
"Script Error%x%x."
"Script"
"script\"
"Select "
"Set %s = New CLASS_NAME_%s
"
"Setup"
"SetupFile"
"SetupOCX"
"Shift+"
"ShowFirstMacro"
"SLS"
"SOFTWARE\Microsoft"
"Software\Microsoft\Plus!\Themes\Current"
"StackWalk"
"staticad"
"stdlib.vbs"
"StopHotkey"
"StopHotkeyMod"
"StrLen"
"SuperComboBox"
"SymFunctionTableAccess"
"SymGetModuleBase"
"Syntax error."
"SYSQMMCHS32L"
"s刾}?曍"
"temp01.dll"
"temp02.dll"
"Thread:%d - %s"
"title"
"TLGDDPP"
"too many codes"
"tt"
"Type = 0x%X"
"Unable to open message catalog: "
"unknown"
"url"
"Usage Error: Can't mix regular "
"user32.dll"
"User-Agent: "
"uservar.ini"
"UT"
"VBScript"
"ver"
"vrbrothers.ad"
"vv"
"wb"
"Webdings"
"Windows Classic.theme"
"winio"
"XX"
"xx"
"yu7688kslio"
"z'"
"ZwCreateThread"
"ZwDeviceIoControlFile"
"ZwQuerySystemInformation"
"ZwReadVirtualMemory"
"ZZ"
"竝M"
"程序出现错误,需要关闭。请将下面的错误信息通过"
"絀"
"竴M"
"竴M"
"非法操作:%x%x."
"辅M"
"父M"
"父縇"
"咐M"
"咐鱈"
"赴M"
"溉M"
"感M"
"感M"
"肛M"
"歌M"
"歌鳯"
"葛M"
"葛M"
"给M"
"给M"
"更新内容"
"竓M"
"进程优先级"
"竫M"
"竫M"
"竂
M"
"竂M"
"竂M"
"笭M"
"笭鵏"
"笀M"
"笀M"
"笀荓"
"窣M"
"窣M"
"峂荅?桕婱魨?d?"
"峂芮E???
"窹M"
"窹蒐"
"婱鬫^3纃?"
"窰鵏"
"硬键模式"
"玉Y??忩"
"笎M"
"笜M"
"笜M"
"笜鯨"
"%|橤"

都是乱码..我看不出哪一个是弹出对话框.

这个软件.. 弹出对话框的提示是.  注册失败.

麻烦给位指点下...

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

收藏
免费 0
支持
分享
最新回复 (1)
雪    币: 42
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
用c32看看
2009-10-24 09:18
0
游客
登录 | 注册 方可回帖
返回
//