-
-
[求助]编程软件,脱壳后程序的试用期变为零.
-
发表于: 2006-11-2 11:10
-
一arm的壳,用dido简单脱壳后程序试用期变为零.
请问对这种方式有没有迅速一点的方法.
因为有个编程软件急着想用......
00475454 > \68 742E8800 PUSH cc.00882E74 ; /FileName = "ArmAccess.DLL"
00475459 . FF15 18E58600 CALL DWORD PTR DS:[<&KERNEL32.LoadLibrar>; \LoadLibraryW
0047545F . 8BD8 MOV EBX,EAX
00475461 . 3BDD CMP EBX,EBP
00475463 . 74 75 JE SHORT cc.004754DA
00475465 . 68 1C2F8800 PUSH cc.00882F1C ; /ProcNameOrOrdinal = "VerifyKey"
0047546A . 53 PUSH EBX ; |hModule
0047546B . FF15 10E58600 CALL DWORD PTR DS:[<&KERNEL32.GetProcAdd>; \GetProcAddress
请问对这种方式有没有迅速一点的方法.
因为有个编程软件急着想用......
00475454 > \68 742E8800 PUSH cc.00882E74 ; /FileName = "ArmAccess.DLL"
00475459 . FF15 18E58600 CALL DWORD PTR DS:[<&KERNEL32.LoadLibrar>; \LoadLibraryW
0047545F . 8BD8 MOV EBX,EAX
00475461 . 3BDD CMP EBX,EBP
00475463 . 74 75 JE SHORT cc.004754DA
00475465 . 68 1C2F8800 PUSH cc.00882F1C ; /ProcNameOrOrdinal = "VerifyKey"
0047546A . 53 PUSH EBX ; |hModule
0047546B . FF15 10E58600 CALL DWORD PTR DS:[<&KERNEL32.GetProcAdd>; \GetProcAddress
