Elec Go

Elec_Go#

js 逆向

解包 app.asar

npm install asar
npx asar e .\app.asar app
cd app

查看 preload.js ，有俩 eval

直接 console.log

然后 node 运行

() => {
    const koffi = require('koffi');
    const lib = koffi.load('mydll.dll');
    const func = lib.func('char* Output(char* input)');
    tmp = {};
    tmp.__proto__.toString = () => {
        return [...JSON.parse(func('fake~~').replace(/ /g, ','))].slice(0, 16);
    };
};
() => {
    setInterval(() => {
        debugger;
    }, 100);
};

index.js 里的base64

(event, arg) => {
    c = CryptoJS.AES.encrypt(arg, k3y, {
        mode: CryptoJS.mode.ECB,
        padding: CryptoJS.pad.ZeroPadding
    });
    if (c.toString() == 'wPUqm+0VU9uX0knpKIWxFilCSO6tae50LTUi0U41Tag=') {
        dialog.showMessageBox({
            title: '正确\uFF01',
            message: 'right!'
        });
    } else {
        dialog.showMessageBox({
            title: '错误\uFF01',
            message: 'NO!!!!!'
        });
    }
};