{"id":3623,"date":"2026-05-19T23:37:38","date_gmt":"2026-05-19T15:37:38","guid":{"rendered":""},"modified":"2026-05-19T23:37:38","modified_gmt":"2026-05-19T15:37:38","slug":"","status":"publish","type":"post","link":"https:\/\/www.souziyuan.top\/index.php\/archives\/3623","title":{"rendered":"x64dbg\u8c03\u8bd5\u5de5\u5177v20250819\u7eff\u8272\u589e\u5f3a\u7248"},"content":{"rendered":"<h3>\u8f6f\u4ef6\u4ecb\u7ecd<\/h3>\n<p>x64_dbg\u662f\u4e00\u6b3ewindows\u7cfb\u7edf\u4e0b\u975e\u5e38\u4f18\u79c0\u768464\u4f4d\u8c03\u8bd5\u5668\uff0c\u4e0e\u76ee\u524d\u70ed\u95e8\u7684\u201cOllyDbg\u201d\u5341\u5206\u76f8\u4f3c\uff0c\u4f7f\u7528\u8fc7OllyDbg\u8c03\u8bd5\u5de5\u5177\u7684\u670b\u53cb\u5e94\u8be5\u5f88\u5bb9\u6613\u4e0a\u624b\u64cd\u4f5c\u3002\u8f6f\u4ef6\u5177\u6709\u7b80\u6d01\u7684\u754c\u9762\u4ee5\u53ca\u5f3a\u5927\u7684\u529f\u80fd\uff0c\u63d0\u4f9b\u4e86\u7c7b\u4f3cC\u7684\u8868\u8fbe\u5f0f\u89e3\u6790\u5668\u3001\u5168\u529f\u80fd\u7684DLL\u548cEXE\u6587\u4ef6\u8c03\u8bd5\u3001IDA\u822c\u7684\u4fa7\u8fb9\u680f\u4e0e\u8df3\u8dc3\u7bad\u5934\u3001\u52a8\u6001\u8bc6\u522b\u6a21\u5757\u548c\u4e32\u3001\u5feb\u53cd\u6c47\u7f16\u3001\u53ef\u8c03\u8bd5\u7684\u811a\u672c\u8bed\u8a00\u81ea\u52a8\u5316\u7b49\u591a\u9879\u5b9e\u7528\u529f\u80fd\uff0c\u6574\u4f53\u6548\u679c\u5341\u5206\u4e50\u89c2\u3002\u672c\u7248\u6587\u4e3a\u5b98\u65b9\u6c49\u5316\u7248\u3002<\/p>\n<h3>\u8f6f\u4ef6\u622a\u56fe<\/h3>\n<p><img decoding=\"async\" src=\"https:\/\/www.x6d.com\/uploads\/allimg\/231007\/1696646390754747.png\" title=\"1696646390754747.png\" alt=\"2023-10-07_103742.png\"\/><\/p>\n<h4>\u8f6f\u4ef6\u529f\u80fd<\/h4>\n<p>1\u3001\u5f00\u6e90<\/p>\n<p>2\u3001\u76f4\u89c2\u548c\u719f\u6089\u7684\u65b0\u7528\u6237\u754c\u9762<\/p>\n<p>3\u3001\u7c7b\u4f3cC\u7684\u8868\u8fbe\u5f0f\u89e3\u6790\u5668<\/p>\n<p>4\u3001DLL\u548cEXE\u6587\u4ef6\u7684\u5168\u529f\u80fd\u8c03\u8bd5(TitanEngine)<\/p>\n<p>5\u3001IDA\u822c\u7684\u4fa7\u8fb9\u680f\u4e0e\u8df3\u8dc3\u7bad\u5934<\/p>\n<p>6\u3001IDA\u6837\u7684\u6307\u4ee4\u4ee4\u724c\u9ad8\u4eae(\u9ad8\u4eae\u5bc4\u5b58\u5668\u7b49)<\/p>\n<p>7\u3001\u5b58\u50a8\u5668\u6620\u5c04<\/p>\n<p>8\u3001\u7b26\u53f7\u89c2<\/p>\n<p>9\u3001\u7ebf\u7a0b\u89c6\u56fe<\/p>\n<p>10\u3001\u5185\u5bb9\u654f\u611f\u7684\u6ce8\u518c\u67e5\u770b<\/p>\n<p>11\u3001\u5b8c\u5168\u53ef\u5b9a\u5236\u7684\u914d\u8272\u65b9\u6848<\/p>\n<p>12\u3001\u52a8\u6001\u8bc6\u522b\u6a21\u5757\u548c\u4e32<\/p>\n<p>13\u3001\u8fdb\u53e3\u91cd\u6784\u96c6\u6210(\u9752\u87f9)<\/p>\n<p>14\u3001\u5feb\u53cd\u6c47\u7f16(BeaEngine)<\/p>\n<p>15\u3001\u7528\u6237\u6570\u636e\u5e93(JSON)\u5f81\u6c42\u610f\u89c1\uff0c\u6807\u7b7e\uff0c\u4e66\u7b7e\u7b49\u3002<\/p>\n<p>16\u3001\u4e0d\u65ad\u589e\u957f\u7684API\u63d2\u4ef6\u7684\u652f\u6301<\/p>\n<p>17\u3001\u53ef\u6269\u5c55\u7684\uff0c\u53ef\u8c03\u8bd5\u7684\u811a\u672c\u8bed\u8a00\u81ea\u52a8\u5316<\/p>\n<p>18\u3001\u591a\u6570\u636e\u7c7b\u578b\u7684\u5185\u5b58\u8f6c\u50a8<\/p>\n<p>19\u3001\u57fa\u672c\u8c03\u8bd5\u7b26\u53f7(PDB)\u7684\u652f\u6301<\/p>\n<p>20\u3001\u52a8\u6001\u5806\u6808\u89c6\u56fe<\/p>\n<p>21\u3001\u5185\u7f6e\u6c47\u7f16(XEDParse)<\/p>\n<p>22\u3001\u67e5\u770b\u4f60\u7684\u8865\u4e01\uff0c\u5e76\u5c06\u5b83\u4eec\u4fdd\u5b58\u5230\u78c1\u76d8<\/p>\n<p>23\u3001\u5185\u7f6e\u7684\u5341\u516d\u8fdb\u5236\u7f16\u8f91\u5668<\/p>\n<p>24\u3001\u67e5\u627e\u5185\u5b58\u6a21\u5f0f<\/p>\n<div class=\"article-down\" id=\"article-down\">\n<h4>\u4e0b\u8f7d\u5730\u5740<\/h4>\n<div style=\"padding:15px;background:#f5f5f5;border-radius:4px;color:#666;text-align:center;\">\n            \ud83d\udd12 \u5269\u4f59\u5185\u5bb9\u5df2\u9690\u85cf\uff0c\u8bf7<a href=\"javascript:void(0);\" onclick=\"openAeroLoginAndForceRefresh()\" style=\"color:#007bff;text-decoration:underline;cursor:pointer;\">\u70b9\u51fb\u767b\u5f55<\/a>\u540e\u67e5\u770b\u5b8c\u6574\u5185\u5bb9<\/br>(\u5df2\u767b\u5f55\u540e\u8bf7\u5237\u65b0\u9875\u9762)\n        <\/div>\n        <script>\n        function openAeroLoginAndForceRefresh() {\n            \/\/ 1. \u5148\u5524\u8d77\u4e3b\u9898\u7684\u767b\u5f55\u5f39\u7a97\n            document.getElementById(\"login-trigger\").click();\n            \n            \/\/ 2. \u5b9a\u4e49\u767b\u5f55\u6210\u529f\u540e\u7684\u5237\u65b0\u51fd\u6570\uff08\u5e26\u968f\u673a\u53c2\u6570\u5f3a\u5236\u8df3\u8fc7\u7f13\u5b58\uff09\n            function forceRefreshPage() {\n                \/\/ \u6dfb\u52a0\u65f6\u95f4\u6233\u53c2\u6570\uff0c\u5f3a\u5236\u6d4f\u89c8\u5668\u548c\u670d\u52a1\u5668\u91cd\u65b0\u52a0\u8f7d\u9875\u9762\uff0c\u8df3\u8fc7\u6240\u6709\u7f13\u5b58\n                window.location.href = window.location.pathname + \"?t=\" + Date.now() + window.location.hash;\n            }\n            \n            \/\/ 3. \u7b2c\u4e00\u91cd\u68c0\u6d4b\uff1a\u76d1\u542cbody\u7684class\u53d8\u5316\uff08\u6807\u51c6\u60c5\u51b5\uff09\n            const classObserver = new MutationObserver(function(mutations) {\n                mutations.forEach(function(mutation) {\n                    if (mutation.target.classList.contains(\"logged-in\")) {\n                        forceRefreshPage();\n                        classObserver.disconnect();\n                        cookieObserver.disconnect();\n                        modalObserver.disconnect();\n                    }\n                });\n            });\n            \n            classObserver.observe(document.body, {\n                attributes: true,\n                attributeFilter: [\"class\"]\n            });\n            \n            \/\/ 4. \u7b2c\u4e8c\u91cd\u68c0\u6d4b\uff1a\u76d1\u542cWordPress\u767b\u5f55cookie\uff08\u6700\u53ef\u9760\uff09\n            let cookieObserver = setInterval(function() {\n                \/\/ \u68c0\u6d4b\u662f\u5426\u5b58\u5728WordPress\u767b\u5f55cookie\n                if (document.cookie.indexOf(\"wordpress_logged_in_\") !== -1) {\n                    forceRefreshPage();\n                    clearInterval(cookieObserver);\n                    classObserver.disconnect();\n                    modalObserver.disconnect();\n                }\n            }, 500); \/\/ \u6bcf500\u6beb\u79d2\u68c0\u6d4b\u4e00\u6b21\n            \n            \/\/ 5. \u7b2c\u4e09\u91cd\u68c0\u6d4b\uff1a\u76d1\u542c\u767b\u5f55\u5f39\u7a97\u5173\u95ed\u4e8b\u4ef6\uff08\u515c\u5e95\uff09\n            const modalObserver = new MutationObserver(function(mutations) {\n                mutations.forEach(function(mutation) {\n                    \/\/ \u68c0\u6d4b\u767b\u5f55\u5f39\u7a97\u662f\u5426\u88ab\u9690\u85cf\n                    const loginModal = document.getElementById(\"login-modal\");\n                    if (loginModal && window.getComputedStyle(loginModal).display === \"none\") {\n                        \/\/ \u5f39\u7a97\u5173\u95ed\u540e\u5ef6\u8fdf1\u79d2\u518d\u68c0\u6d4bcookie\uff0c\u9632\u6b62\u767b\u5f55\u8fd8\u6ca1\u5b8c\u6210\n                        setTimeout(function() {\n                            if (document.cookie.indexOf(\"wordpress_logged_in_\") !== -1) {\n                                forceRefreshPage();\n                            }\n                        }, 1000);\n                        modalObserver.disconnect();\n                    }\n                });\n            });\n            \n            \/\/ \u76d1\u542c\u767b\u5f55\u5f39\u7a97\u7684\u663e\u793a\u72b6\u6001\u53d8\u5316\n            const loginModal = document.getElementById(\"login-modal\");\n            if (loginModal) {\n                modalObserver.observe(loginModal, {\n                    attributes: true,\n                    attributeFilter: [\"style\", \"class\"]\n                });\n            }\n            \n            \/\/ 6. 15\u79d2\u540e\u81ea\u52a8\u505c\u6b62\u6240\u6709\u68c0\u6d4b\uff0c\u9632\u6b62\u5185\u5b58\u6cc4\u6f0f\n            setTimeout(function() {\n                classObserver.disconnect();\n                clearInterval(cookieObserver);\n                modalObserver.disconnect();\n            }, 15000);\n        }\n        <\/script>\n","protected":false},"excerpt":{"rendered":"<p>\u8f6f\u4ef6\u4ecb\u7ecd x64_dbg\u662f\u4e00\u6b3ewindows\u7cfb\u7edf\u4e0b\u975e\u5e38\u4f18\u79c0\u768464\u4f4d\u8c03\u8bd5\u5668\uff0c\u4e0e\u76ee\u524d\u70ed\u95e8\u7684\u201cOllyDbg\u201d\u5341\u5206\u76f8 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-3623","post","type-post","status-publish","format-standard","hentry","category-winruanjian"],"_links":{"self":[{"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/posts\/3623","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/comments?post=3623"}],"version-history":[{"count":0,"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/posts\/3623\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/media?parent=3623"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/categories?post=3623"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.souziyuan.top\/index.php\/wp-json\/wp\/v2\/tags?post=3623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}