有一软件用flexlm7.2加密的,按照论坛里面的文章《制作Compuware.SoftIce.Driver.Suite.3.0.1.StinkyD的license》在.text:00413DF1处,下断后运行,在.text:00413DDA时,就直接跳过了,倒不了断点处!
.text:00413DB2 push ebp
.text:00413DB3 mov ebp, esp
.text:00413DB5 sub esp, 30h
.text:00413DB8 mov [ebp+var_10], 7648B98Eh
.text:00413DBF mov [ebp+var_14], 3
.text:00413DC6 mov eax, [ebp+arg_0]
.text:00413DC9 mov ecx, [eax+6Ch]
.text:00413DCC mov edx, [ecx+1D4h]
.text:00413DD2 and edx, 8000h
.text:00413DD8 test edx, edx
.text:00413DDA jz short loc_413DFF
.text:00413DDC cmp dword_496F54, 0
.text:00413DE3 jz short loc_413DFF
.text:00413DE5 mov eax, [ebp+arg_8]
.text:00413DE8 push eax
.text:00413DE9 mov ecx, [ebp+arg_4]
.text:00413DEC push ecx
.text:00413DED mov edx, [ebp+arg_0]
.text:00413DF0 push edx
.text:00413DF1 call dword_496F54 在此处下断
.text:00413DF7 add esp, 0Ch
.text:00413DFA jmp loc_413F12
还请大侠们给以指点! 谢谢!!
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法