{"id":2882,"date":"2016-04-08T14:08:44","date_gmt":"2016-04-08T06:08:44","guid":{"rendered":"http:\/\/www.aiti123.com\/?p=2882"},"modified":"2016-04-08T14:08:44","modified_gmt":"2016-04-08T06:08:44","slug":"%e8%bd%af%e4%bb%b6%e7%a0%b4%e8%a7%a3%e5%88%9d%e7%ba%a7%e5%ae%9e%e4%be%8b%e6%95%99%e7%a8%8b%e9%99%84%e5%b7%a5%e5%85%b7%e9%99%84%e5%9b%be","status":"publish","type":"post","link":"http:\/\/www.aiti123.com\/?p=2882","title":{"rendered":"\u8f6f\u4ef6\u7834\u89e3\u521d\u7ea7\u5b9e\u4f8b\u6559\u7a0b(\u9644\u5de5\u5177\u9644\u56fe)"},"content":{"rendered":"<p>\u6700\u8fd1\u5728\u7fa4\u91cc\u603b\u662f\u770b\u5230\u5f88\u591a\u65b0\u670b\u53cb\u5728\u95ee\uff1a<br \/>\n1\u3001\u201c\u65b0\u624b\u600e\u4e48\u5b66\u7834\u89e3\u554a\uff1f\u201d\uff08\u8fd9\u662f\u6807\u51c6\u7684\u4f38\u624b\u515a\uff0cbaidu google\u5176\u5b9e\u5f88\u597d\u7528\uff09<br \/>\n2\u3001\u201c\u54ce\u5440XX\u5927\u725b\uff0c\u6211\u4ec0\u4e48\u57fa\u7840\u90fd\u6ca1\u6709\u554a\u6211\u4e0d\u4f1a\u6c47\u7f16\uff0c\u4e0d\u4f1aC\u66f4\u4e0d\u4f1aC++\u8fd8\u4e0d\u4f1a\u2026\u2026\u2026\u2026\u603b\u4e4b\u9ad8\u624b\u4f1a\u7684\u6211\u90fd\u4e0d\u4f1a\uff0c\u6211\u80fd\u5b66\u4e48\uff1f\u201d\uff08\u660e\u786e\u7684\u544a\u8bc9\u4f60\uff0c\u4f60\u80fd\uff01\u4f60\u4e0d\u548c\u5510\u50e7\u4e00\u6837\u7f57\u55e6\u7684\u8bdd\u4f60\u4e00\u5b9a\u80fd\u3002\uff09<br \/>\n3\u3001\u67d0\u767d\u53d1\u5e16\u95ee\u66f0\uff1a\u201cXX\u5927\u725b\uff0c\u8fd9\u8f6f\u4ef6\u4f60\u80fd\u5e2e\u6211\u770b\u770b\u5417\uff1f\u6211\u5c1d\u8bd5\u4e86N\u5929\u8fd8\u662f\u6ca1\u6709\u641e\u5b9a\uff0c\u8fd9\u662f\u8f6f\u4ef6\u5730\u5740 www.XXX.com\/XXX\/XXX.rar\u00a0 \u641e\u5b9a\u4e86\u53d1\u5230\u6211\u90ae\u7bb1\u91cc\u5427\uff0c\u6211\u90ae\u7bb1\u662fXXXXX@XX.COM\u3002\u201d<br \/>\n\u5176\u5b9e\u561b\uff0c\u6240\u6709\u7684\u6280\u672f\u90fd\u662f\u4ece\u57fa\u7840\u5f00\u59cb\u7684\uff0c\u4e0d\u8981\u53bb\u5984\u60f3\u90a3\u7a7a\u4e2d\u7684\u697c\u9601\uff0c\u4e5f\u4e0d\u8981\u60f3\u901f\u6210\u3002<br \/>\n\u5728\u8fd9\u660e\u786e\u7684\u544a\u8bc9\u5927\u5bb6\uff0c\u5176\u5b9e\u5927\u725b\u4eec\u6700\u8ba8\u538c\u7684\u5c31\u662f\u95ee\u8fd9\u4e9b\u672c\u4e0d\u8be5\u95ee\u7684\u95ee\u9898\u7684\u4eba\u3002<br \/>\n\u56e0\u4e3a\u8fd9\u4e9b\u4eba\u6839\u672c\u5c31\u6ca1\u6709\u8ba4\u6e05\u73b0\u5b9e\uff0c\u6ca1\u6709\u770b\u5230\u6210\u529f\u80cc\u540e\u7684\u4e00\u4e9b\u4e1c\u897f\u3002\u4ed6\u4eec\u53ea\u770b\u5230\u4e8610%+40%\uff0c\u8ba4\u4e3a\u81ea\u5df1\u4e5f\u53ef\u4ee5\u51ed\u501f\u8fd9\u4e9b\u505a\u5230\u3002<br \/>\n\u5077\u5077\u66b4\u4e0b\u6599\u3002\u5176\u5b9e\u5728\u53bb\u5e74\u7684\u65f6\u5019\uff0c\u5c0f\u751f\u540c\u978b\uff0c\u9006\u6d41\u5e08\u5085\u7b49\u73b0\u5728\u7684\u5927\u725b\u8fd8\u90fd\u662f\u4e9b\u5c0f\u83dc\u54e6\uff0c\u73b0\u5728\u5462\uff1f \u563f\u563f~~<br \/>\n\u597d\u4e86\uff0c\u4e0a\u9762\u53fd\u5495\u4e86\u8fd9\u4e48\u591a\u3002\u4e5f\u7b97\u662f\u8003\u9a8c\u4e0b\u5927\u5bb6\u7684\u8010\u5fc3\u5427\u3002\u563f\u563f\u3002<br \/>\n\u5176\u5b9e\u5b66\u4e60\u7684\u9996\u8981\u6761\u4ef6\u662f\u5174\u8da3\uff01\uff01\u5174\u8da3\u8d8a\u5927\u4f60\u7684\u6295\u5165\u5c31\u66f4\u591a\u3002<\/p>\n<p>\u672c\u6587\u65e8\u5728\u5206\u4eab\uff0c\u975e\u672c\u4eba\u539f\u521b\uff0c\u867d\u7136\u6211\u4f1a\u7b80\u5355\u7684\u7834\u89e3\u4f46\u6ca1\u6709\u8fd9\u7bc7\u6587\u7ae0\u5199\u7684\u8be6\u7ec6\uff0c\u6211\u53ea\u662f\u6dfb\u679d\u52a0\u53f6\u800c\u5df2\u3002\u5927\u5bb6\u53ef\u4ee5\u5ffd\u7565\u56fe\u7247\u4e0a\u7684logo\u6c34\u5370\uff0c\u4e0d\u7136\u53c8\u6709\u4eba\u8d28\u7591\u8bf4\u4ec0\u4e48\u8f6f\u5e7f\u544a\uff0c\u672c\u4eba\u6709\u70b9\u61d2\uff0c\u61d2\u5f97\u7528\u8f6f\u4ef6\u53bb\u6389\uff0c\u671b\u5927\u5bb6\u8c05\u89e3\u3002<br \/>\n\u672c\u6587\u5c31\u662f\u89e3\u51b3\u65b0\u624b\u7684\u7591\u95ee\uff0c\u8ba9\u4f60\u8d70\u51fa\u8ff7\u832b\uff0c\u8ba9\u4f60\u77e5\u9053\u5982\u4f55\u5b66\u7834\u89e3\u30020\u57fa\u7840\u4e00\u6837\u80fd\u5b66\u7684\u5f88\u597d\u3002<br \/>\n\u5927\u725b=10%\u5929\u5206+40%\u8010\u5fc3\uff08\u8fd9\u662f\u5e16\u5b50\u5199\u5b8c\u6210\u540e\u52a0\u7684\u4e00\u53e5\uff0c\u5176\u5b9e\u4f60\u80fd\u8ba4\u771f\u770b\u5b8c\u8fd9\u5e16\u5b50\u4f60\u5c31\u591f\u6709\u8010\u5fc3\u4e86\uff09+50%\u7684\u957f\u671f\u52aa\u529b\u3002<br \/>\n\u6211\u76f8\u4fe1\u4e0b\u9762\u8fd9\u4e2a\u6559\u7a0b\u8db3\u591f\u8c03\u8d77\u4f60\u7684\u5174\u8da3\u4e86\uff0c\u770b\u5b8c\u540e\u4f60\u4f1a\u53d1\u73b0\uff0c\u539f\u6765\u7834\u89e3\u8f6f\u4ef6\u5176\u5b9e\u5e76\u6ca1\u6709\u90a3\u4e48\u96be\u3002<br \/>\n\u4e00\u3001 \u51c6\u5907\u597d\u5e38\u7528\u7834\u89e3\u5de5\u5177\uff1a<br \/>\n<strong>1\u3001 \u67e5\u58f3\u5de5\u5177\uff1aPEiD\u00a0 0.95\u6c49\u5316\u7248<\/strong><\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>peid(\u67e5\u58f3\u5de5\u5177)v0.95\u4e2d\u6587\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>200KB\u00a0<img decoding=\"async\" src=\"http:\/\/7.pic.pc6.com\/thumb\/up\/2011-2\/2011214172419_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_17104.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>2\u3001 \u8131\u58f3\u8c03\u8bd5\uff1aOllyICE<\/strong>\uff08\u4fd7\u79f0OD\uff0c\u53ef\u4e0b\u8f7d\u4e00\u4e9bOD\u63d2\u4ef6\u4fdd\u5b58\u5728\u7a0b\u5e8f\u6587\u4ef6\u76ee\u5f55\u4e0b\u7684plugin\u6587\u4ef6\u5939\u4e2d\uff0c\u542f\u52a8OD\u65f6\u4f1a\u81ea\u52a8\u94fe\u63a5\u63d2\u4ef6\uff09<\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>OllyICE\u4e2d\u6587\u7248\u4e0e\u539f\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>2.3M\u00a0<img decoding=\"async\" src=\"http:\/\/0.pic.pc6.com\/thumb\/up\/2011-11\/2011116194122_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_56856.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>3\u3001 Win32\u53cd\u6c47\u7f16\uff1aWinHex<\/strong>\u00a0\uff08\u672c\u6587\u6682\u7528\u4e0d\u7740\uff09<\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>WinHex18.4\u4e2d\u6587\u514d\u8d39\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>1.3M\u00a0<img decoding=\"async\" src=\"http:\/\/3.pic.pc6.com\/thumb\/up\/2014-12\/2014121610855_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_19701.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>4\u3001 \u4fee\u590d\u5de5\u5177\uff1aImportREC<\/strong>\uff08\u672c\u6587\u6682\u7528\u4e0d\u7740\uff09<\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>\u8f93\u5165\u8868\u91cd\u5efa\u5de5\u5177(ImportREC)V1.7 \u7eff\u8272\u4e2d\u6587\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>590KB\u00a0<img decoding=\"async\" src=\"http:\/\/3.pic.pc6.com\/thumb\/up\/2013-7\/201372094345_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_96926.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>5\u3001\u00a0<strong>\u6ce8\u518c\u673a\u7f16\u5199\uff1akeymake<br \/>\n<\/strong><\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>brmflpt.dll\u5b98\u65b9\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>969KB\u00a0<img decoding=\"async\" src=\"http:\/\/8.pic.pc6.com\/thumb\/up\/2010-10\/2010102694610_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_4299.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u591f\u4e86\uff0c\u521d\u5b66\u4e0d\u5b9c\u592a\u591a\u3002\u65b0\u624b\u6240\u6709\u7684\u5de5\u5177\u5728\u5c0f\u751f\u5de5\u5177\u5305\u91cc\u90fd\u6709\uff08\u8d5e\u4e0b\u5c0f\u751f\u540c\u978b\u7684\u65e0\u79c1\u5949\u732e\uff09<br \/>\n\u4e8c\u3001 \u58f3\u7684\u6982\u5ff5\uff1a\u5173\u4e8e\u58f3\u7684\u4ecb\u7ecd\u6587\u7ae0\u5f88\u591a\uff0c\u5f88\u591a\u521d\u5b66\u8005\u8fd8\u4e0d\u77e5\u9053\u58f3\u662f\u4ec0\u4e48\uff0c\u90a3\u4e48\u4f60\u5c31\u6682\u4e14\u8fd9\u6837\u901a\u4fd7\u7684\u53bb\u7406\u89e3\uff1a\u58f3\u5c31\u662f\u8f6f\u4ef6\u7684\u5305\u88c5\u5916\u58f3\u3002<br \/>\n\u4e09\u3001 \u8131\u58f3\uff1a\u987e\u540d\u601d\u4e49\uff0c\u6211\u5c31\u4e0d\u591a\u8bf4\u4e86\u3002<br \/>\n\u56db\u3001 \u8c03\u8bd5\uff1a\u7528OD\u8c03\u8bd5\u7a0b\u5e8f\u7684\u8fdb\u7a0b\uff0c\u5bfb\u627e\u5173\u952e\uff08\u7b97\u6cd5\uff09CALL\uff0c\u4fee\u6539\u6709\u5173\u6c47\u7f16\u8bed\u8a00\u8fbe\u5230\u8f6f\u4ef6\u6ce8\u518c\u6216\u7834\u89e3\u7684\u76ee\u7684\u3002<br \/>\n\u4e94\u3001 \u6709\u4eba\u95ee\uff1a\u6211\u4e0d\u61c2\u6c47\u7f16\u8bed\u8a00\u548c\u7b97\u6cd5\u600e\u4e48\u529e\uff1f\u6211\u544a\u8bc9\u4f60\uff0c\u6ca1\u5173\u7cfb\uff0c\u9996\u5148\u4f60\u5fc5\u987b\u4ece\u7b80\u5355\u7684\u3001\u597d\u6b3a\u8d1f\u7684\u8f6f\u4ef6\u5165\u624b\uff08\u521d\u5b66\u8005\u5343\u4e07\u522b\u627e\u5e74\u8f7b\u7684\u3001\u7ecf\u5e38\u66f4\u65b0\u7684\u6216\u9ad8\u7248\u672c\u7684\u8f6f\u4ef6\uff09\uff0c\u5426\u5219\uff0c\u4f60\u53ea\u4f1a\u4ee5\u5931\u8d25\u800c\u544a\u7ec8\u3002<br \/>\n\u516d\u3001 \u5982\u679c\u4f60\u662f\u7b2c\u4e00\u6b21\u5b66\u7834\u89e3\uff0c\u6211\u544a\u8bc9\u4f60\u4e00\u4e2a\u65b9\u6cd5\uff0c\u53ea\u8981\u4f60\u6309\u5982\u4e0b\u64cd\u4f5c\u4e00\u822c\u90fd\u80fd\u6210\u529f\uff08\u6709\u7684\u65b0\u7248\u672c\u8f6f\u4ef6\u9664\u5916\uff09\uff1a<br \/>\n1\u3001 \u9996\u5148\u6ce8\u518c\u8f6f\u4ef6\uff0c\u67e5\u770b\u8f6f\u4ef6\u5f39\u51fa\u7684\u6709\u5173\u6ce8\u518c\u5931\u8d25\u7684\u4fe1\u606f\u6846\u7684\u5185\u5bb9\u3002<br \/>\n2\u3001 \u67e5\u58f3\uff1a\u6709\u58f3\u8131\u58f3\uff0c\u65e0\u58f3\u7528OD\u8f7d\u5165\u3002<br \/>\n3\u3001 \u624b\u52a8\u8131\u58f3\u57fa\u672c\u65b9\u6cd5\uff1a\u4eceOD\u8f7d\u5165\u8f6f\u4ef6\u7a0b\u5e8f\u540e\u5f39\u51fa\u662f\u5426\u5206\u6790\u5bf9\u8bdd\u6846\uff0c\u70b9\u201c\u5426\u201d\uff0c\u505c\u5728\u7a0b\u5e8f\u58f3\u7684\u5165\u53e3\uff08\u542b\u6709pushad\u7b49\u7c7b\u4f3c\u5b57\u7b26\uff09\u3002\u63a5\u4e0b\u6765\u6211\u4eec\u7684\u76ee\u7684\u662f\u8981\u5bfb\u627e\u7b2c\u4e00\u4e2apopad \u3002<br \/>\n\uff081\uff09 \u9996\u5148\u6309F8\uff0c\u63a5\u4e0b\u6765\u6216\u8fd1\u5904\u4fbf\u662fCALL\uff0c\u6b64\u65f6\u7684CALL\u6216\u662f\u79bb\u8fd9\u91cc\u5f88\u8fd1\u7684CALL\u5fc5\u987b\u6309F7\uff0c\u5426\u5219\u4f60\u5c31\u6389\u5165\u9677\u4e95\uff0c\u540e\u9762\u9047\u5230CALL\u4e00\u65e6\u6389\u5165\u4e5f\u6ca1\u5173\u7cfb\uff0c\u4f60\u5148\u8bb0\u4e0b\u6765\uff0c\u91cd\u65b0\u8f7d\u5165\u7a0b\u5e8f\uff08\u6309CTRL+F2\uff09\uff0c\u518d\u9047\u5230\u8fd9\u4e2a\u65f6\u5c31\u7528F7\u8fdb\u5165\u3002<br \/>\n\uff082\uff09 \u51fa\u73b0\u5f80\u56de\u8df3\u8f6c\u65f6\uff0c\u5373\u7ea2\u8272\u7ebf\u663e\u793a\u8df3\u8f6c\u5b9e\u73b0\uff0c\u5fc5\u987b\u5728\u4e0b\u4e00\u884c\u70b9\u5de6\u9375\uff0c\u7136\u540e\u6309F4\u6b65\u8fc7\uff0c\u7070\u8272\u4e3a\u8df3\u8f6c\u672a\u5b9e\u73b0\uff0c\u53ef\u4e0d\u7406\u5b83\u7167\u6837F8\u3002<br \/>\n\uff083\uff09 \u5176\u4ed6\u5168\u90e8F8\uff0c\u4e00\u8def\u4e0b\u53bb\u5fc5\u5b9a\u80fd\u627e\u5230\u7b2c\u4e00\u4e2apopad\uff0c\u627e\u5230\u540e\u79bb\u6b64\u4e0d\u8fdc\u5fc5\u5b9a\u6709\u4e00\u4e2a\u5927\u7684\u8df3\u8f6c\uff0c\u4e00\u65e6\u8df3\u8f6c\u6765\u5230\u6709push\u00a0 ebp\u5b57\u6837\uff0c\u8bf4\u660e\u58f3\u5df1\u8d70\u5b8c\u5230\u4e3b\u7a0b\u5e8f\uff08OEP\uff09\uff0c\u5728\u6b64\u7528OD\u63d2\u4ef6\u2192ollyDump\u2192Dump debu\u2026\u2192Dump\u8131\u58f3\u2192\u4fdd\u5b58\u3002<br \/>\n4\u3001 \u7834\u89e3\uff1aOD\u8f7d\u5165\u7a0b\u5e8f\u3001\u70b9\u6587\u4ef6\u2192\u6253\u5f00\u2192\u70b9\u51fb\u8981\u7834\u89e3\u7684\u8f6f\u4ef6\u7a0b\u5e8f\uff08\u65e0\u58f3\u6216\u5df1\u8131\u58f3\u7684\uff09\u3002<br \/>\n5\u3001 \u9f20\u6807\u7f6e\u5de6\u4e0a\uff08\u53cd\u6c47\u7f16\uff09\u7a97\u53e3\u70b9\u53f3\u9375\uff0c\u5f39\u51fa\u6846\u9009\u9879\u4e2d\u9009\u62e9ultra string reference\uff08\u8fc7\u6fc0\u7684\u5b57\u7b26\u4e32\u53c2\u8003\uff09\u4e2d\u7684Find \u3000ASCII\u3002<br \/>\n6\u3001 \u5728\u5f39\u51fa\u7684\u7a97\u53e3\u5185\u67e5\u627e\u7b2c\u4e00\u6b65\u9aa4\u7684\u6ce8\u518c\u4fe1\u606f\u5185\u5bb9\u6216\u6709\u5173\u6ce8\u518c\u6210\u529f\u548c\u6ce8\u518c\u5931\u8d25\u7684\u5b57\u7b26\u3002\u5982\u679c\u627e\u4e0d\u5230\uff0c\u5efa\u8bae\u4f60\u653e\u5f03\uff0c\u53e6\u9009\u5176\u4ed6\u8f6f\u4ef6\uff0c\u6700\u597d\u662f\u5e74\u7eaa\u5927\u4e9b\u7684\uff08\u4e00\u822c\u57282005\u5e74\u53ca\u4ee5\u524d\u7684\uff09\u3002<br \/>\n7\u3001 \u627e\u5230\u6709\u5173\u5b57\u7b26\u540e\uff0c\u53cc\u51fb\u5b83\uff0c\u56de\u5230OD\u4e3b\u7a97\u53e3\uff0c\u5728\u53cd\u6c47\u7f16\u7a97\u53e3\uff08\u5de6\u4e0a\uff09\u4e2d\u53ef\u4ee5\u770b\u5230\u6709\u5173\u5b57\u7b26\uff0c\u7136\u540e\u5c31\u5728\u5b57\u7b26\u4e0a\u4e0b\u9644\u8fd1\u5bfb\u627e\u5173\u952e\u8df3\u8f6c\uff08\u5373\u8df3\u5411\u6ce8\u518c\u5931\u8d25\u6216\u6ce8\u518c\u6210\u529f\u5904\uff09\uff0c\u5728\u8be5\u8df3\u8f6c\u8fd1\u5904\u5fc5\u5b9a\u6709\u4e00\u4e2a\u5c31\u662f\u5173\u952eCALL\u3002<br \/>\n8\u3001 \u5982\u679c\u7528\u7206\u7834\uff0c\u5c31\u4fee\u6539\u5173\u952e\u8df3\u8f6c\uff08jnz\u6539\u4e3ajz\uff0cjz\u6539\u4e3ajnz\u7b49\uff09\u3002<br \/>\n9\u3001 \u5982\u679c\u662f\u8ffd\u6ce8\u518c\u7801\u5c31\u5728\u5173\u952eCALL\u8fd9\u884c\u4e0b\u65ad\u70b9\uff08\u6309F2\u6216\u53cc\u51fb\u9f20\u6807\uff09\uff0c\u7136\u540e\u6309F9\u8fd0\u884c\u540e\uff0c\u4f1a\u5f39\u51fa\u8f6f\u4ef6\u6ce8\u518c\u5bf9\u8bdd\u6846\uff0c\u968f\u610f\u8f93\u5165\u6ce8\u518c\u4fe1\u606f\u540e\u786e\u5b9a\uff0c\u8fd9\u65f6\u6ce8\u610f\u89c2\u5bdf\u53f3\u4e0a\u7684\u5bc4\u5b58\u5668\u7a97\u53e3\u4f1a\u663e\u793a\u51fa\u4f60\u8f93\u5165\u7684\u5047\u7801\u548c\u8f6f\u4ef6\u7684\u771f\u7801\uff0c\u771f\u7801\u53ef\u4ee5\u6ce8\u518c\uff0c\u800c\u8fd9\u4e2aCALL\u53ef\u4ee5\u7528\u6765\u505a\u6ce8\u518c\u673a\u3002<br \/>\n\u4e0b\u9762\uff0c\u6211\u7ed9\u5927\u5bb6\u627e\u6765\u4e00\u4e2a\u7b80\u5355\u7684\u8f6f\u4ef6\u6f14\u793a\u4e00\u4e0b\u5b9e\u4f8b\uff1a<br \/>\n\u3010\u8f6f\u4ef6\u540d\u79f0\u3011\u73b0\u4ee3\u6c49\u8bed\u8bcd\u5178<br \/>\n\u3010\u6ce8\u518c\u65b9\u5f0f\u3011\u786e\u8ba4\u7801+\u6ce8\u518c\u7801<br \/>\n\u3010\u7834\u89e3\u5de5\u5177\u3011PEiD\u00a0 0.95\u3000OllyICE\u3000keymake<br \/>\n1\u3001 \u67e5\u58f3\u4e3aASpack 2.12 -&gt; Alexey Solodovnikov\u3000\u3000\u89c1\u4e0b\u56fe<br \/>\n<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/2013072009163953931_600_0.jpg\" alt=\"\" \/><br \/>\n2\u3001 \u4e0b\u9762\u5f00\u59cb\u8131\u58f3\uff0c\u9996\u5148\u7528OD\u8f7d\u5165\u8f6f\u4ef6\uff0c\u5206\u6790\u9879\u70b9\u201c\u5426\u201d\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134541441_600_0.jpg\" alt=\"\" \/><br \/>\n3\u3001\u63a5\u4e0b\u6765\u7b2c\u4e00\u6b65\u6309F8\u3001\u7b2c2\u6b65F7\uff08\u8fd9\u91cc\u7684CALL\u79bb\u5165\u53e3\u5f88\u8fd1\u54e6\uff09\u3001\u7b2c3\u6b65F8\u2026\u2026\u4ee5\u4e0b\u6309\u56fe\u4e2d\u7684\u6ce8\u91ca\u64cd\u4f5c\uff0c\u672a\u6ce8\u91ca\u7528F7\u6216F4\u7684\u5219\uff0c\u5168\u90e8\u7528F8\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/7.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134778669_600_0.jpg\" alt=\"\" \/><br \/>\n\u4e2d\u95f4\u7701\u7565\u2026\u3000\u2026\u4e00\u8defF8\u6765\u5230\u8fd9\u91cc\u540e\uff0c\u6309\u56fe\u6ce8\u91ca\u8d70\uff0c\u6ce8\u91ca\u680f\u672a\u6ce8\u660e\u5168\u90e8F8<br \/>\n<img decoding=\"async\" src=\"http:\/\/8.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134733010_600_0.jpg\" alt=\"\" \/><br \/>\n\u4e2d\u95f4\u7701\u7565\u2026\u3000\u2026\u4e00\u8defF8\u6765\u5230\u8fd9\u91cc\u540e\uff0c\u6309\u56fe\u6ce8\u91ca\u8d70\uff0c\u6ce8\u91ca\u680f\u672a\u6ce8\u660e\u5168\u90e8F8<br \/>\n<img decoding=\"async\" src=\"http:\/\/6.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134812158_600_0.jpg\" alt=\"\" \/><br \/>\n\u4e2d\u95f4\u7701\u7565\u2026\u3000\u2026\u4e00\u8defF8\u6765\u5230\u8fd9\u91cc\u540e\uff0c\u6309\u56fe\u6ce8\u91ca\u8d70\uff0c\u6ce8\u91ca\u680f\u672a\u6ce8\u660e\u5168\u90e8F8<br \/>\n<img decoding=\"async\" src=\"http:\/\/3.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134884805_600_0.jpg\" alt=\"\" \/><br \/>\n\u4ece\u4e0a\u9762\u7a0b\u5e8f\u8fd4\u56de\u76f4\u63a5\u8df3\u5230\u8fd9\u91cc\uff0c\u8fd9\u5c31\u662f\u5178\u578b\u7684OEP\u5165\u53e3\u4e86\u3002\u2018<br \/>\n<img decoding=\"async\" src=\"http:\/\/6.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134976638_600_0.jpg\" alt=\"\" \/><br \/>\n4\u3001\u7528OD\u63d2\u4ef6\u76f4\u63a5Dump\uff0c\u5982\u4e0b\u56fe<br \/>\n<img decoding=\"async\" src=\"http:\/\/1.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134981983_600_0.jpg\" alt=\"\" \/><br \/>\n5\u3001\u5728\u5f39\u51fa\u5bf9\u8bdd\u6846\u4e2d\u70b9Dump\u540e\u547d\u540d\u6587\u4ef6\u3001\u4fdd\u5b58\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/0.pic.pc6.com\/thumb\/up\/2013-7\/2013072009134959022_600_0.jpg\" alt=\"\" \/><br \/>\n\u751f\u6210\u7684\u6587\u4ef6\u4fbf\u662f\u5df2\u7ecf\u8131\u58f3\u7684\u7a0b\u5e8f\u6587\u4ef6\u4e86\u3002<br \/>\n\u63a5\u4e0b\u6765\u53ef\u4ee5\u5f00\u59cb\u7834\u89e3\u4e86\uff1a<br \/>\n1\u3001\u7528OD\u8f7d\u5165\u5df1\u8131\u58f3\u7684\u7a0b\u5e8f\u6587\u4ef6\uff0c\u7a0b\u5e8f\u505c\u5728OEP\u5165\u53e3\uff08\u6ce8\u610f\u770b\uff0c\u8fd9\u91cc\u5df1\u4e0d\u662f\u58f3\u7684\u5165\u53e3\u4e86\uff09\u3002\u9f20\u6807\u7f6e\u53cd\u6c47\u7f16\u7a97\u53e3\u4e2d\u70b9\u53f3\u9375\uff0c\u5728\u5f39\u51fa\u5bf9\u8bdd\u6846\u4e2d\u6309\u4e0b\u56fe\u9009\u62e9\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/3.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135172875_600_0.jpg\" alt=\"\" \/><br \/>\n2\u3001\u53cc\u51fb\u5982\u56fe\u6ce8\u518c\u5931\u8d25\u2026.\u5b57\u7b26<br \/>\n<img decoding=\"async\" src=\"http:\/\/0.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135235562_600_0.jpg\" alt=\"\" \/><br \/>\n3\u3001\u53cc\u51fb\u540e\u56de\u5230OD\u4e3b\u7a97\u53e3\uff0c\u53ef\u4ee5\u770b\u5230\u6ce8\u518c\u5931\u8d25\u7531\u4e0a\u65b9\u8df3\u8f6c\u800c\u6765\uff0c\u6211\u4eec\u987a\u7740\u7ea2\u7ebf\u5411\u4e0a\u627e\u5173\u952e\u8df3\u8f6c\u53ca\u5173\u952eCALL\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/4.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135336616_600_0.jpg\" alt=\"\" \/><br \/>\n4\u3001 \u627e\u5230\u8fd9\u91cc\uff0c0051B153\u8df3\u5411\u6ce8\u518c\u5931\u8d25\uff0c\u5fc5\u662f\u5173\u952e\u8df3\u8f6c\u4e86\uff0c\u5b83\u4e0a\u9762\u7684CALL\u4e00\u822c\u90fd\u662f\u5173\u952eCALL\uff08\u56e0\u4e3a\u662f\u521d\u5b66\u6211\u4eec\u6682\u4e0d\u8fdb\u5165\u8ddf\u8e2a\u7b97\u6cd5\uff09\u3002<br \/>\n\u6211\u5728\u6b64\u4ecb\u7ecd\u4e09\u79cd\u7b80\u5355\u7684\u7834\u89e3\u65b9\u5f0f\uff0c\u5177\u4f53\u770b\u4ee5\u4e0b\u5185\u5bb9\u53ca\u53c2\u8003\u56fe\u6ce8\u91ca\u64cd\u4f5c\u3002<br \/>\n\uff081\uff09 \u7206\u7834\uff1a\u5728\u5173\u952e\u8df3\u8f6c\u5904\u7684jnz\u6539\u4e3ajz\u6216\u70b9\u53f3\u9375\u2192\u4e8c\u8fdb\u5236\u2192\u7528nop\u586b\u5145\u3002<br \/>\n\uff082\uff09 \u8ffd\u6ce8\u518c\u7801\uff1a\u5728\u5173\u952eCALL\u5904\u4e0b\u65ad\u70b9\uff0c\u7136\u540eF9\u8fd0\u884c\u3002<br \/>\n\uff083\uff09 \u6ce8\u518c\u673a\uff1a\u5229\u7528\u4e0a\u9762\u7684\u64cd\u4f5c\u53ca\u53c2\u8003\u5bc4\u5b58\u5668\u7a97\u53e3\u5185\u5bb9\uff0c\u7528keymake\uff08\u6ce8\u518c\u673a\u7f16\u5199\u5668\uff09\u5236\u4f5c\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/0.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135478662_600_0.jpg\" alt=\"\" \/><br \/>\n\uff081\uff09\u7206\u7834\uff1aNop\u586b\u5145\u56fe<br \/>\n<img decoding=\"async\" src=\"http:\/\/2.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135529504_600_0.jpg\" alt=\"\" \/><\/p>\n<p>5\u3001 \u5173\u952e\u8df3\u8f6c\u4fee\u6539\u540e\uff0c\u70b9\u53f3\u9375\u2192\u590d\u5236\u5230\u53ef\u6267\u884c\u6587\u4ef6\u2192\u6240\u6709\u4fee\u6539\u2192\uff08\u5f39\u51fa\u5bf9\u8bdd\u6846\uff09\u70b9\u5168\u90e8\u590d\u5236\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135512151_600_0.jpg\" alt=\"\" \/><br \/>\n6\u3001\u5728\u65b0\u5f39\u51fa\u7a97\u53e3\u70b9\u53f3\u9375\uff0c\u9009\u62e9\u4fdd\u5b58\u6587\u4ef6\u5373\u53ef\uff0c\u81f3\u6b64\u7206\u7834\u5b8c\u6210\uff0c\u8fd0\u884c\u8f6f\u4ef6\u5373\u53ef\u6ce8\u518c\u6210\u529f\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135658601_600_0.jpg\" alt=\"\" \/><br \/>\n\uff082\uff09\u8ffd\u6ce8\u518c\u7801\uff1a<br \/>\n1\u3001 \u6211\u4eec\u5728\u5173\u952eCALL\u5904\u4e0b\u65ad\u70b9F9\u8fd0\u884c\u7a0b\u5e8f\u5f39\u51fa\u8f6f\u4ef6\uff0c\u9009\u62e9\u6ce8\u518c\u9879\u5e76\u8f93\u5165\u6ce8\u518c\u4fe1\u606f\uff0c\u70b9\u786e\u8ba4\u6ce8\u518c\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/2.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135636844_600_0.jpg\" alt=\"\" \/><br \/>\n2\u3001\u67e5\u770b\u5bc4\u5b58\u5668\u7a97\u53e3\uff0c\u8fd9\u91cc\u663e\u793a\u8f6f\u4ef6\u7684\u771f\u5047\u7801\u3002KKK\u4e3a\u6211\u8fd9\u91cc\u8f93\u5165\u7684\u7801\u5047\uff0c\u5728\u7b2c\u4e09\u884cEDX\u5904\u663e\u793a\u7684\u4e3a\u771f\u7801\uff08\u6ce8\u610f\uff1a\u8fd9\u91cc\u7684\u771f\u7801\u4e0e\u8f93\u5165\u7684\u786e\u8ba4\u7801\u5bf9\u5e94\uff09\u3002\u53e6\u987b\u8bf4\u660e\uff1a\u5f53\u70b9\u786e\u8ba4\u6ce8\u518c\u540e\uff0cOD\u4f1a\u9646\u7eed\u5f39\u51fa\u51e0\u4e2a\u51fa\u9519\u7684\u5bf9\u8bdd\u6846\uff08\u8bf4\u660e\u8f6f\u4ef6\u6709\u8c03\u7528\u51fd\u6570\uff0c\u65e2\u662f\u521d\u5b66\uff0c\u8fd9\u91cc\u6682\u4e0d\u53bb\u6df1\u7a76\uff09\uff0c\u53ef\u4ee5\u76f4\u63a5\u70b9\u201c\u5426\u201d\uff0c\u6253\u5f00\u8f6f\u4ef6\u8f93\u5165\u5bf9\u5e94\u786e\u8ba4\u7801\u548c\u771f\u7801\u5373\u53ef\u6ce8\u518c\u6210\u529f\u3002<br \/>\n<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/2013072009135721601_600_0.jpg\" alt=\"\" \/><br \/>\n\uff083\uff09\u6ce8\u518c\u673a\u5236\u4f5c\uff1a\u8fd9\u91cc\u5c31\u4e0d\u8d58\u8ff0\u4e86\uff0c\u770b\u770b\u65b0\u624b\u95ee\u98981\u4f60\u4e00\u5b9a\u80fd\u5f97\u5230\u7b54\u6848\u3002<\/p>\n<p>\u8fd8\u6709\u5728\u8fd9\u91cc\u5f3a\u8c03\u4e0b\uff0c\u4f60\u771f\u662f0\u86cb\u7684\u8bdd\u5c31\u5fc5\u987b\u4ece\u7b80\u5355\u7684\u3001\u597d\u6b3a\u8d1f\u7684\u8f6f\u4ef6\u5165\u624b\uff08\u521d\u5b66\u8005\u5343\u4e07\u522b\u627e\u5e74\u8f7b\u7684\u3001\u7ecf\u5e38\u66f4\u65b0\u7684\u6216\u9ad8\u7248\u672c\u7684\u8f6f\u4ef6\uff09\uff0c\u5426\u5219\uff0c\u4f60\u53ea\u4f1a\u4ee5\u5931\u8d25\u800c\u544a\u7ec8\u3002<br \/>\n\u770b\u5b8c\u8fd9\u4e2a\u6559\u7a0b\u4f60\u5982\u679c\u6709\u5174\u8da3\u4e86\u7684\u8bdd\u90a3\u4e48\u4f60\u53ef\u4ee5\u53bb\u4e0b\u8f7d\u5c0f\u751f\u5de5\u5177\u5305\uff0c\u5728\u91cc\u9762\u6709\u4e2a\u5c0f\u751f\u505a\u7684\u8bb0\u4e8b\u672c\uff0c\u91cc\u9762\u6709\u8bb0\u5f55\u5929\u8349\u548c\u9ed1\u9e70\u7684\u65b0\u624b\u6559\u7a0b\u3002\u90fd\u662f\u7b80\u5355\u6613\u61c2\u7684\u3002<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<table border=\"1\" cellspacing=\"1\" cellpadding=\"2\" align=\"center\">\n<tbody>\n<tr>\n<td><strong>\u8f6f\u4ef6\u540d\u79f0\uff1a<\/strong><\/td>\n<td>\u5c0f\u751f\u6211\u6015\u6015\u5de5\u5177\u53052013.04.01\u6700\u65b0\u7248<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8f6f\u4ef6\u5927\u5c0f\uff1a<\/strong><\/td>\n<td>641M\u00a0<img decoding=\"async\" src=\"http:\/\/9.pic.pc6.com\/thumb\/up\/2013-7\/201375105751_600_0.jpg\" alt=\"\" \/><\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0b\u8f7d\u5730\u5740\uff1a<\/strong><\/td>\n<td>http:\/\/www.pc6.com\/softview\/SoftView_96050.html<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5b66\u4e60\u4e86\u57fa\u7840\u540e\u4f60\u5c31\u53ef\u4ee5\u5f00\u59cb\u4f60\u7684\u7834\u89e3\u4e4b\u8def\u4e86\u3002\u89c9\u5f97\u81ea\u5df1\u80fd\u641e\u5b9a\u4e00\u822c\u8f6f\u4ef6\u4e86\u7684\u8bdd\uff0c\u8fd8\u53ef\u4ee5\u8ddf\u968f\u7ec3\u4e60\u4e00\u8d77\u6765\u5b66\u4e60\u3002<br \/>\nPC6\u662f\u4e2a\u6709\u7231\u5fc3\uff0c\u6709\u4e0a\u8fdb\u5fc3\uff0c\u6709\u5173\u5fc3\uff0c\u6709\u70ed\u5fc3\u7684\u5927\u5bb6\u5ead\u3002\u5728\u8fd9\u91cc\u4f60\u4ed8\u51fa\u7684\u591a\uff0c\u5f97\u5230\u7684\u5c31\u80fd\u66f4\u591a\uff01\uff01\uff01\u795d\u798f\u6240\u6709\u8f6f\u4ef6\u7231\u597d\u8005\u65e9\u65e5\u5b66\u4f1a\u7834\u89e3\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6700\u8fd1\u5728\u7fa4\u91cc\u603b\u662f\u770b\u5230\u5f88\u591a\u65b0\u670b\u53cb\u5728\u95ee\uff1a 1\u3001\u201c\u65b0\u624b\u600e\u4e48\u5b66\u7834\u89e3\u554a\uff1f\u201d\uff08\u8fd9\u662f\u6807\u51c6\u7684\u4f38\u624b\u515a\uff0cbaidu google\u5176\u5b9e [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[2193,2194,2191,2192,2188,2190,2189],"_links":{"self":[{"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/posts\/2882"}],"collection":[{"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2882"}],"version-history":[{"count":2,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/posts\/2882\/revisions"}],"predecessor-version":[{"id":2884,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=\/wp\/v2\/posts\/2882\/revisions\/2884"}],"wp:attachment":[{"href":"http:\/\/www.aiti123.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2882"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2882"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.aiti123.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2882"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}