能力值:
( LV2,RANK:10 )
|
-
-
2 楼
谁帮帮忙,解释一下呀
|
能力值:
( LV12,RANK:200 )
|
-
-
3 楼
你给的新连接下载不了
|
能力值:
( LV2,RANK:10 )
|
-
-
4 楼
还是用我自己电脑的下载链接吧,已经可以了,谢谢楼上的
|
能力值:
( LV2,RANK:10 )
|
-
-
5 楼
针对E生成的程序的调试破解:
OD调试:
首先必须脱壳:004014E1 独立编译00401191 非独立编译
在上面地址上断点(F2),然后F9飞到断点的地方。然后按7下F7,再一直按F8,按到反汇编注释
cld(初始化 cpu 选择状态)
finit停下来,接着右键搜索字符
|
能力值:
( LV2,RANK:10 )
|
-
-
6 楼
首先感谢你的回答,虽然步骤跟csship的差不多,但是很直接。
上面的步骤我都已经做了,但是还有提示信息不在文本框里,我想应该在其他模块。因此我想知道的是其他信息到底在哪?难道是从服务期返回来的吗?
|
能力值:
( LV2,RANK:10 )
|
-
-
7 楼
可以用E-Code Explorer分析
|
能力值:
( LV2,RANK:10 )
|
-
-
8 楼
谢谢,早就试过了,我用的是E-Code Explorer 0.86 正式版
|
能力值:
( LV2,RANK:10 )
|
-
-
9 楼
难道E语言生成出来的EXE不能爆破了吗?
|
能力值:
( LV2,RANK:10 )
|
-
-
10 楼
文本框?
如果是Delphi程序遇到这种文本框提示 该下什么断点呢
|
能力值:
( LV6,RANK:90 )
|
-
-
11 楼
易语言,总之一个偶不喜欢的语言
|
能力值:
( LV2,RANK:10 )
|
-
-
13 楼
谁帮我读读这段代码:
004073AB 55 PUSH EBP
004073AC 8BEC MOV EBP,ESP
004073AE 81EC 20000000 SUB ESP,20
004073B4 C745 FC 0000000>MOV DWORD PTR SS:[EBP-4],0
004073BB 68 00000000 PUSH 0
004073C0 BB 08010000 MOV EBX,108
004073C5 E8 104C0000 CALL 手脱.0040BFDA
004073CA 83C4 04 ADD ESP,4
004073CD 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
004073D0 68 77334000 PUSH 手脱.00403377
004073D5 FF75 F8 PUSH DWORD PTR SS:[EBP-8]
004073D8 E8 8CD5FFFF CALL 手脱.00404969
004073DD 83C4 08 ADD ESP,8
004073E0 83F8 00 CMP EAX,0
004073E3 B8 00000000 MOV EAX,0
004073E8 0F94C0 SETE AL
004073EB 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
004073EE 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8]
004073F1 85DB TEST EBX,EBX
004073F3 74 09 JE SHORT 手脱.004073FE
004073F5 53 PUSH EBX
004073F6 E8 BB4B0000 CALL 手脱.0040BFB6
004073FB 83C4 04 ADD ESP,4
004073FE 837D F4 00 CMP DWORD PTR SS:[EBP-C],0
00407402 0F84 34000000 JE 手脱.0040743C
00407408 68 05000080 PUSH 80000005
0040740D 6A 00 PUSH 0
0040740F A1 30229A00 MOV EAX,DWORD PTR DS:[9A2230]
00407414 85C0 TEST EAX,EAX
00407416 75 05 JNZ SHORT 手脱.0040741D
00407418 B8 F1324000 MOV EAX,手脱.004032F1
0040741D 50 PUSH EAX
0040741E 68 04000080 PUSH 80000004
00407423 6A 00 PUSH 0
00407425 68 6B334000 PUSH 手脱.0040336B
0040742A 68 02000000 PUSH 2
0040742F BB 6C020000 MOV EBX,26C
00407434 E8 A14B0000 CALL 手脱.0040BFDA
00407439 83C4 1C ADD ESP,1C
0040743C 68 00000000 PUSH 0
00407441 BB 10020000 MOV EBX,210
00407446 E8 8F4B0000 CALL 手脱.0040BFDA
0040744B 83C4 04 ADD ESP,4
0040744E 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
00407451 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
00407454 68 01030080 PUSH 80000301
00407459 6A 00 PUSH 0
0040745B 68 08000000 PUSH 8
00407460 68 03000080 PUSH 80000003
00407465 FF35 38229A00 PUSH DWORD PTR DS:[9A2238]
0040746B FF35 34229A00 PUSH DWORD PTR DS:[9A2234]
00407471 68 03000080 PUSH 80000003
00407476 FF75 F8 PUSH DWORD PTR SS:[EBP-8]
00407479 FF75 F4 PUSH DWORD PTR SS:[EBP-C]
0040747C 68 03000000 PUSH 3
00407481 BB E0010000 MOV EBX,1E0
00407486 E8 4F4B0000 CALL 手脱.0040BFDA
0040748B 83C4 28 ADD ESP,28
0040748E 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
00407491 8955 E8 MOV DWORD PTR SS:[EBP-18],EDX
00407494 DD45 E4 FLD QWORD PTR SS:[EBP-1C]
00407497 DC25 54354000 FSUB QWORD PTR DS:[403554]
0040749D DC1D 5C354000 FCOMP QWORD PTR DS:[40355C]
004074A3 DFE0 FSTSW AX
004074A5 F6C4 41 TEST AH,41
004074A8 0F85 14000000 JNZ 手脱.004074C2
004074AE 68 01000000 PUSH 1
004074B3 68 01000000 PUSH 1
004074B8 68 08000000 PUSH 8
004074BD E8 DC000000 CALL 手脱.0040759E
004074C2 E8 98170000 CALL 手脱.00408C5F
004074C7 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
004074CA 68 04000080 PUSH 80000004
004074CF 6A 00 PUSH 0
004074D1 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
004074D4 85C0 TEST EAX,EAX
004074D6 75 05 JNZ SHORT 手脱.004074DD
004074D8 B8 E6324000 MOV EAX,手脱.004032E6
004074DD 50 PUSH EAX
004074DE 68 01000000 PUSH 1
004074E3 BB 68010000 MOV EBX,168
004074E8 E8 ED4A0000 CALL 手脱.0040BFDA
004074ED 83C4 10 ADD ESP,10
004074F0 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
004074F3 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8]
004074F6 85DB TEST EBX,EBX
004074F8 74 09 JE SHORT 手脱.00407503
004074FA 53 PUSH EBX
004074FB E8 B64A0000 CALL 手脱.0040BFB6
00407500 83C4 04 ADD ESP,4
00407503 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
00407506 50 PUSH EAX
00407507 8B5D FC MOV EBX,DWORD PTR SS:[EBP-4]
0040750A 85DB TEST EBX,EBX
0040750C 74 09 JE SHORT 手脱.00407517
0040750E 53 PUSH EBX
0040750F E8 A24A0000 CALL 手脱.0040BFB6
00407514 83C4 04 ADD ESP,4
00407517 58 POP EAX
00407518 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0040751B 6A 00 PUSH 0
0040751D 68 E6324000 PUSH 手脱.004032E6
00407522 6A FF PUSH -1
00407524 6A 08 PUSH 8
00407526 68 06000116 PUSH 16010006
0040752B 68 01000152 PUSH 52010001
00407530 E8 8D4A0000 CALL 手脱.0040BFC2
00407535 83C4 18 ADD ESP,18
00407538 6A 00 PUSH 0
0040753A 68 EC324000 PUSH 手脱.004032EC ; 验证
0040753F 6A FF PUSH -1
00407541 6A 0A PUSH 0A
00407543 68 04000116 PUSH 16010004
00407548 68 01000152 PUSH 52010001
0040754D E8 704A0000 CALL 手脱.0040BFC2
00407552 83C4 18 ADD ESP,18
00407555 68 04000080 PUSH 80000004
0040755A 6A 00 PUSH 0
0040755C 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0040755F 85C0 TEST EAX,EAX
00407561 75 05 JNZ SHORT 手脱.00407568
00407563 B8 E6324000 MOV EAX,手脱.004032E6
00407568 50 PUSH EAX
00407569 68 25000100 PUSH 10025
0040756E 68 10000116 PUSH 16010010
00407573 68 01000152 PUSH 52010001
00407578 68 02000000 PUSH 2
0040757D BB E0060000 MOV EBX,6E0
00407582 E8 534A0000 CALL 手脱.0040BFDA
00407587 83C4 1C ADD ESP,1C
0040758A 8B5D FC MOV EBX,DWORD PTR SS:[EBP-4]
0040758D 85DB TEST EBX,EBX
0040758F 74 09 JE SHORT 手脱.0040759A
00407591 53 PUSH EBX
00407592 E8 1F4A0000 CALL 手脱.0040BFB6
00407597 83C4 04 ADD ESP,4
0040759A 8BE5 MOV ESP,EBP
0040759C 5D POP EBP
0040759D C3 RETN
(哪句是关键点呢,试了都没用?)
|