Tips: When you see this prompt, it indicates that the current article has been migrated from the original emlog blog system. The publication date of the article is quite old, and the formatting and content may not be complete. Please understand.
Various Language Button Event Feature Codes
Date: 2017-5-15 Author: A Jue Tutorial Views: 2920 Comments: 1
Debugging software, the most important thing is to set breakpoints. So how to set breakpoints is an important skill.
For example: to pop up a prompt box, set MessageBoxA; for the registry, set RegOpenKeyA, etc.Of course, being able to directly set breakpoints on button events is even more convenient, because once you reach the button event, you will quickly arrive at the core code, and you will be close to your cracking goal.
This article summarizes methods for finding button events in various languages. You can also use tools like VBexplorer, DEDE, ECE, etc.
1. VB Programs
In fact, the method for finding button events in VB is the most common, known as the universal breakpoint. It is not only applicable to button events but also has many other uses, such as canceling NAG, startup boxes, gray buttons or hidden buttons, timer events at startup, etc. Specifics are left for you to summarize; here we only discuss button events!After loading OD, press CTRL+B to find 816C24.
2. Delphi and BC++ Programs
Delphi and BC++ are developed by the same company, so the search methods are the same. Of course, you can also use DEDE.
After loading OD, press CTRL+G to go to 00401000.
Then press CTRL+B to find the feature code 740E8BD38B83????????FF93????????
The next task is to continuously press CTRL+L to continue searching and set breakpoints with F2.
3. Easy Language
This search method in Easy Language is also suitable for programs with shells; for others, you must unpack them before continuing.After loading OD, just press F9 to run the program. When the program is running,
then press CTRL+B to find FF 55 FC 5F 5E
4. VC++ Programs (Non-MFC Programs)
After loading OD, right-click and select "Find," then "All Commands."
In the pop-up input box, write the feature code sub eax,0a.
After setting the breakpoint, follow up with F7, press F8 a few times, and you will reach the button event.
5. MFC Class Programs
Of course, determining whether a program is MFC or non-MFC relies on your own judgment.
Run the program and then press CTRL+F to find the feature code: sub eax,0a.
After setting the breakpoint, follow up with F7, press F8 a few times, and you will reach the button event code!
Summary: Various Language Button Event Feature Codes
VB:
816C24
Delphi & BC++:
740E8BD38B83????????FF93????????
MFC:
sub eax,0a
VC++:
sub eax,0a
Easy Language:
FF 55 FC 5F 5E or (e-debug)
Universal Breakpoint:
F3A58BC883E103F3A4E8
For how to use button events, please check my Zero-Basis Cracking Series Tutorial
Some parts of this article are excerpted from the internet.
User Comments:
123 4 years ago (2017-08-21)
Looks good!