易语言破解方法汇总

admin · 发表于 2021-10-24 14:42:48

1.FF25 找到JMP 集地址 PUSH 窗口
2.PUSH 10001 查找窗口特征push 0x520....
3.FF55FC5F5E 按钮事件断点

真伪码追踪,关键语句
test edx,3
上下文关键处
mov edx,dword ptr ss:[esp+0x4]
mov ecx,dword ptr ss:[esp+0x8]
test edx,edx
Jnz *******

第三方支持库=8D54240883EC0C52FF742414C744240800000000C744240C00000000C7442410000000008D54240852FFD38B44240C8B5424108B4C241483C418C3
分配内存=558BEC518B4508506A008B0DAC1D4C0051
释放内存=558BEC837D080074258B450850
按钮事件=558BEC83EC18535657894DE88B45088B480C518B55088B4208508B4D088B5104528B45088B08518B4DE8E8
载入窗口=83EC0C33C0568B74241C578B7C2418C707000000008B4E1485C9
结束=558BEC8B450850B918385F00E8????????8B4D0851
运行=83EC54568B74246457B91100000033C08D7C2418F3AB8B4620C74424184400000085C0BF01000000??????????????????8B461883F806
信息框=83EC64568B74247457????????????????????????????????8D4424085056
取操作系统类别=81EC940000008D442400C74424009400000050????????????????????????????8B8C2498000000B801000000890181C494000000C3
取数值注册项=8B44240C8B4C24088B5424046A006A01505152??????????83C414C3
取文本注册项=8B44240C8B4C24088B5424046A006A00505152??????????83C414C3
取硬盘特征=6A00E8????????8B4C240883C4048901C3
关闭系统=8B44240C81EC940000008B481453568B3085C9????????????????????????????????????????????????????????????????????????????????????????????????????????????33C083FE040F94C05350
读配置项=B814280000????????????????????????????????????????????????????????????????????????8B4624508D4C2410
启动线程=568B742410578B7C241083FF01????????????????????????????33C08B168D4C2410516A0050526A006A00
文本比较=8B 54 24 04 8B 4C 24 08 85 D2 75 0D 33 C0 85 C9 74 06 80 39 00 74 01 48 C3 85 C9
写到文件=55 8B EC 6A FF 68 B0 4C 46 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 1C 8B 45 08 53 5657 8B 7D 10 89 65 F0 8B 37 C7 00 00 00 00 00 80 3E 00
写注册项=8B44240C8B4C24088B5424046A00505152??????????83C410C3
文件是否存在=8B44240C8B0851??????????8B54240883C4048902C3
是否已创建=568B742410578B7C240C6A00C707000000008B46085068ED070000?????????085C0
读入文件=83EC148D4C2400????????????????????????????????6AFF508D4C2428
到字节集=53568B742414578B46088BF8C1E81D81E7FFFFFFDF83E001578BD8??????????83C40485C0
删除文件=8B44240C8B0851????????????8B5424048902C3
删除目录=8B44240C8B0851??????????8B54240883C4048902C3
删全部空=8B44240C8B4C24088B5424046A03505152??????????83C410C3
取字节集长度=8B44240C8B0085C0????8B4C24048901C38B5424048B40048902C3
8B74241C83C9FF33C08B3EF2AEF7D1498BE945556A42
取剪切板文本=566A00??????????????????????????????????????????????????????????????????????????8B4C240C83C404568901
取文件尺寸=8B4C240C81EC400100008D4424008B115052????????????????????????????????????8B8424440100008B4C2420890881C440010000C3
置随机数种子=8B44240C8B480885C9????????????????????????????????8BD05081E2FF0000008D4C1164
取命令行=83EC14535657????????????8BF8B120803F22
取运行目录=6A006A0068D3070000??????????????????????8B4C240883C4048901C3
取现行时间=83EC0C8D44240050??????????DD008B4C2410DD1983C40CC3
置剪切板文本=8B4424046A00C70000000000????????????????????????????????????????
创建目录=8B44240C6A008B0851????????????8B5424048902C3
取当前目录=81EC040100008D442400C644240000506804010000????????????????????C6442400008D4C240051
取执行文件名=6A006A0068D4070000??????????????????????8B4C240883C4048901C3
取随机数=8B4C240C568B410885C0
取绝对值=8B4C240CDD01DC1D30AC4600DD01DF????????????????????????????????4C2404DD19C3
取符号=8B4C240CDD01DC1D30AC4600DFE0F6C440????8B4C240433C08901C3
取整=8B44240C8B48048B105152??????????????????????????????????????????8B4C24048901C3
取字节集注册项=8B44240C8B4C24088B5424046A006A02505152??????????83C414C3
到文本=83EC645356578B7C247C8B47088BF0C1E81D81E6FFFFFFDF83E0018BD8????33C081FE050000800F94C0
延迟=538B5C24105657833B00????????????????FFD78BF08B0303F06A006A0068E2070000
寻找文本=8B44240C8B4C24088B5424046A00505152??????????83C410C3
程序入口=558BEC6AFF68????????68????????64A100000000506489250000000083EC585356578965E8
易语言入口=B806000000E8????????FCDBE3E8
静态编译识别=558BEC6AFF??????????64A100000000506489250000000081ECAC010000535657
核心支持库=8D44240883EC0C50FF74241433C0894424088944240C894424108D54240852FFD38B44240C8B5424108B4C241483C418C3
第三方支持库=8D 54 24 08 83 EC 0C 52 FF 74 24 14 C7 44 24 08 00 00 00 00
按钮事件1=558BEC83EC18535657894DE88B45088B480C518B55088B4208508B4D088B5104528B45088B0851
按钮事件2=55 8B EC 83 EC 44 53 56 57 89 4D CC 8B 45 08 8B 48 0C 51 8B 55 08 8B 42 08 50 8B 4D 08 8B 51 04 52 8B 45 08 8B 08 51 8B 4D CC
信息框=83EC6453568B742478578B7E0857
信息框2=83EC64568B742474578B7E0857
取文本长度=8B44240C5783C9FF8B5424088B3833C0F2AEF7D1495F890AC3
窗口消息处理=6A FF 68 ?? ?? ?? ?? 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 78 53 55 56 8B E9
调用API地址=50 E8 ?? ?? ?? ?? 83 C4 04 FF E0
取API地址1=55 8B EC 8B 45 08 50 B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? 5D C3
取API地址2=64 A1 00 00 00 00 6A FF 68 ?? ?? ?? ?? 50 64 89 25 00 00 00 00 83 EC 10 53 56 57 8B F9
退出=55 8B EC 8B 45 08 50 B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 4D 08
退出事件=55 8B EC 8B 45 08 A3 ?? ?? ?? ?? 5D C3
参数返回=8D 44 24 08 83 EC 0C 50 FF 74 24 14 33 C0
文本比较=8B 54 24 04 8B 4C 24 08 85 D2 75 0D 33 C0 85 C9 74 06 80 39 00 74 01 48 C3 85 C9 75 09 33 C0 80 3A 00 74 01 40 C3
取随机数=8B4C240C568B410885C0750433F6
子文本替换=83 EC 28 8B 44 24 34 53 55 56 8B 48 20 8B 68 0C 8B 18 57 85 C9 89 6C 24 18 75 0A C7 44 24 14
文本替换=53 8B 5C 24 10 56 57 8B 13 83 C9 FF 8B FA 33 C0 F2 AE F7 D1 49 52 8B F1 8D 4C 24 1C ??????????8B 43 0C 33 C9 48
取当前目录=81EC040100008D442400C644240000506804010000????????????????????C6442400008D4C240051
分配内存=55 8B EC 51 8B 45 08 50 6A 00 8B 0D ?? ?? ?? ?? 51 FF 15 ?? ?? ?? ?? 89 45 FC 83 7D FC 00
内存释放=55 8B EC 83 7D 08 00 74 25 8B 45 08 50 B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? 85 C0
到整数1=83EC14568B7424248B46083D01020080
到整数2=50 E8 ?? ?? ?? ?? 83 C4 04 FF E0
到整数3=8B 44 24 10 56 57 33 FF 3D 01 02 00 80 0F 87 87 00 00 00 74 7B 3D 06 00 00 80 77 5E 0F 84 8F 00 00 00 3D 02 00 00 80 0F 84 84 00 00 00 3D 04 00 00 80 0F 85 A2 00 00 00 8B 54 24 10 83 EC 0C
到数值1=55 8B EC 8B 45 08 50 B9 80 56 59 00 E8 ?? ?? ?? ?? 5D C3
到数值2=55 8B EC 51 8B 45 14 56 3D 01 02 00 80 0F 87 80 00 00 00 74 72 3D 03 00 00 80 0F 84 98 00 00 00 3D 04 00 00 80 74 17 3D 01 01 00 80 75 7A 8B 45 0C
到短整数=8B 44 24 10 56 33 F6 3D 01 03 00 80 57 77 71 74 15 3D 04 00 00 80 74 24 3D 01 01 00 80 74 11 3D 01 02 00 80 75 04 8B 74 24 10
到长整数=55 8B EC 8B 45 14 56 3D 01 02 00 80 77 5C 74 53 3D 04 00 00 80 74 12 3D 01 01 00 80 75 72 8B 45 0C
DLL调用=83 EC 14 56 8B 74 24 24 8B 46 08 3D ?? ?? ?? ?? 0F 87
模盾模块Jmp=55 8B EC C9 58 87 04 24 FF E0
调用子程序前面的call=5E 6A 00 4B 75 FB
调用子程序1=8B 44 24 08 8B 4C 24 0C 56 8B 74 24 08
调用子程序3=55 8B EC 83 EC 1C 53 56 57 8B 7D 08
到文本1=83 EC 64 53 56 57 8B 7C 24 7C 8B 47 08 8B F0 C1 E8 1D
到文本2=8B 44 24 10 81 EC 04 01 00 00 8B C8 53 81 E1 00 00 00 20 33 DB 56 81 F9 00 00 00 20 57
到字节集1=53 56 8B 74 24 14 57 8B 46 08 8B F8 C1 E8 1D 81 E7 FF FF FF DF
到字节集2=8B 44 24 10 83 EC 08 53 56 8B F0 57 C1 E8 1D 81 E6 FF FF FF DF
载入窗口1=8D 44 24 08 83 EC 0C 50 FF 74 24 14 33 C0 89 44 24 08 89 44 24 0C 89 44 24 10 8D 54 24 08 52 FF D3 8B 44 24 0C 8B 54 24 10 8B 4C 24 14 83 C4 18 C3
载入窗口2=83 EC 0C 33 C0 56 8B 74 24 1C 57 8B 7C 24 18 C7 07 00 00 00 00 8B 4E 14 85 C9
左移=8B 44 24 08 8B 4C 24 14 D3 E0 C3
右移=8B 44 24 08 8B 4C 24 14 D3 F8 C3
位操作=8B 54 24 04 8B 44 24 08 83 FA 01 7E ?? 56 8D 4C 24 18 4A 8B 31 83 C1 0C ?? ?? ?? 75 ?? 5E C3
位取反=8B 44 24 08 F7 D0 C3
句柄相关1=8B 44 24 0C 8B 4C 24 08 8B 54 24 04 50 51 52 B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? C2 0C 00
句柄相关2=A1 ?? ?? ?? ?? 85 C0 74 14 8B 4C 24 0C 8B 54 24 08 51 8B 4C 24 08 52 51 FF D0 C2 0C 00 33 C0 C2 0C 00
取字节集数据1=83 EC 10 8B 44 24 1C 53 55 56 8B 30 57 8B 78 0C 83 C6 08 83 FF 01 8B 5E FC
取字节集数据2=55 8B EC 83 EC 1C 56 8B 75 18 83 FE 01 57 7C 05 83 FE 0A 7E 0A 6A 64 E8 ?? ?? ?? ?? 83 C4
分割文件1=8B 44 24 0C 83 EC 1C 8B 48 14 53 8B 18 55 56 57 85 C9 75 0A C7 44 24 14 ?? ?? ?? ?? EB 07 8B 48 0C
分割文件2=8B 44 24 1C 83 EC 1C 85 C0 75 0A C7 44 24 04 ?? ?? ?? ?? EB 08 8B 44 24 30
取文本中间1=8B 54 24 0C 56 57 83 C9 FF 8B 32 33 C0 8B FE F2 AE 8B 42 0C 8B 52 18 F7 D1 49
取文本中间2=53 55 8B 6C 24 10 56 57 8B FD 83 C9 FF 33 C0 F2 AE F7 D1 49 74 4B
取文本左边1=8B 44 24 0C 8B 50 0C 85 D2 7F 0B 8B 44 24 04 C7 00 00 00 00 00 C3 56
取文本左边2=53 56 8B 74 24 10 57 8B FE 83 C9 FF 33 C0 F2 AE F7 D1 49 8B D9
取文本右边=8B 44 24 0C 56 8B 70 0C 85 F6 7F 0C 8B 44 24 08 5E C7 00 00 00 00 00 C3 8B 10 57
破解插件

易语言破解.osc (3.01 KB, 下载次数: 73)

分析助手

易语言逆向分析助手3.0.exe (1.09 MB, 下载次数: 188)

		自动登录	找回密码
密码			立即注册

易语言破解方法汇总

浏览过的版块