Skip to content
This repository has been archived by the owner on Jan 6, 2022. It is now read-only.

Commit

Permalink
content update
Browse files Browse the repository at this point in the history
  • Loading branch information
fjqisba committed Nov 27, 2018
1 parent 1412ec4 commit 55301e9
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 3 deletions.
4 changes: 2 additions & 2 deletions E-Debug.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -57,8 +57,8 @@ extc void _export cdecl ODBG_Pluginaction(int origin, int action, VOID *item)
if (action == 2) {
CString szInfo;
szInfo += "Plugin:E-Debug Plus\r\n";
szInfo += "Verion:1.01\r\n";
//szInfo += "Bug:fjqisba@sohu.com\r\n";
szInfo += "Verion:1.1\r\n";
szInfo += "Bug:fjqisba@sohu.com\r\n";
szInfo += " Thanks to Xjun";
MessageBox(NULL, szInfo, L"About", MB_ICONINFORMATION);
return;
Expand Down
Binary file added IMG/测试.gif
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
4 changes: 3 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ E-debug Plus对于函数的匹配要求相当严格,一个字节出错也会匹
这个问题从理论上能用模糊匹配来解决,即通过计算匹配字节的百分比来判断函数,然而目前这并不是我想要研究的方向.
脱壳或许是更好的处理方式,然而有时壳会将整个支持库函数进行VM,如此则软件完全失效.

目前只做出了定点分析,未实现扫描模型,因为等收集到足够多的信息后,再做进一步打算.
目前只做出了定点分析,未实现扫描模型,因为我想等收集到足够多的信息后,再做进一步打算.
所以此款软件目前无法分析黑月编译的易语言程序.
而至于编译或者独立编译,由于软件数目少,研究难度低,暂时也懒得去写了.

Expand All @@ -96,5 +96,7 @@ OD\plugin\Esig即可
未加壳的程序,在text区段可直接分析.
加壳的程序,可待text区段解码后,CPU窗口到达text区段再开始分析.

![测试](/IMG/测试.GIF)

如果有分析崩溃的样本,可以发送至fjqisba@sohu.com

0 comments on commit 55301e9

Please sign in to comment.