坏坏LLLLLL 发表于 2016-4-14 18:01

一个让人想吐的可可

用XJUN师傅的DLL 试过之后不能注入，我猜可能是作者防止有人用注入器注入，真是重重验证加本地验证加内存修改，然后FZ和FZ本地dll模块都加了VMP。
用OD打开软件 简直V的亲妈爆炸。
我上个软件，希望大牛讲解一下，看看V的程度。http://pan.baidu.com/s/1mimzbsc密码:zo40

hu110356776 发表于 2016-4-14 18:01

本帖最后由 hu110356776 于 2016-4-15 01:40 编辑


有一个API虽然是 动态得..但是 算法是 A+B

SignData:
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

其他没什么了

顺便把 DLL 奉上:

六神 发表于 2016-4-14 20:39

等待大神来搞

暴爆 发表于 2016-4-15 02:55

本帖最后由 暴爆 于 2016-4-15 02:57 编辑

ks_setLicense->调用
TAoLJqnv+c4REZc1U8eSLibEfikPd8SP1cjxdVac1x9rh5NXLkONdl004S9Ld6w5/f8RqRBOk3oW1rag9xoInrT24PE3cxXPj97xUk6B5tu2N0RfkMQHOCp7t6odgcgSOqm8xMy08Dx2UwQ1iNXoFUbaK4i+LiAKnphmRWlb11WUGWnnSHv/ciDAb2TwYdD9Z+3gUIof8gSbRaLVa7kz7AImLKrgjRyeEY67WXCvXCnsfMBWnEnBO4F3/THHSRlhwjb1THB5i/EhxnwsSwaF9MJbI7gCeKBbLxeRl8EIfD6riT0N1GLF2X2A0GTWMjLlsMhmXOK0xvA+0SmpZ0aOdnpe8RnHC7fJN33fE0FND6tY+J8ka7pYj59VmY20STZBIj+PMkLOu0o3EFpPOw0VDB4jtnrEfhStDXRsnCQIzFynMLES0SH4EC7Pw3ukeMAvxagNn/6EpxC0wXzKWEUZAfu37uYEhcOCHZSePX03QLBEcRlONSSGbEv8x7IU/AthU8cnXkTNV1BfMLTbBS9XcujVRQXA54AYz0PZBt9LEh9dbqmCdu5G8nzGC00xglQGVF0mt6U6/kiiALgcKsSAjC1dRxcOb0iLyTUYgK/cacsILzP/njbIBeA7VmenSD05qfoYEJp78nbNn40pu40DDI9VskoO1ymzN/Xih132WiUsdSrUZkHYFW10sSXFMKg024VqzmcHRleGrz9w6cX9+oHDXDrrEWPz6OM4neup+p/OQ7juzYgPgi0svFhlq5bV3wCMk8fkww0HuK4UVaW+ESGmKLv6JK3Q1jwR4fthSahvIriz7UbVhtvPYrF6yyy334pTqkcCtTUeRCazzsJ23Kay39BkA6L2QiwuUmEa7N7wes4y2/5KrY697sBt/o+AXiZTHkJlSRwyQqH751AgLEEOS97OcmW9chWeFU40H8yfKJyk9iwEz+sbEmmlirL529uZM7VU+WRY4iRR2Ogz58cQ7rvvR3hJIpk3DYn0pxtZSoZ6IRBw8QOTxNjiJzKyFkr5dMPVjYIw3ngQWqsgu9Ba5MWvXIc8V0dbBxpIkNp5n4BcHzwJ3nrNUsrKSPH2PgJF3Ye486QxrPqAnGbug1zePn1SNKF8SyDuhlTv7el+yvXbVv10WK/RzvmU+J9UBvKjCpbjEbonxjt94O8ZLmF4YEtwbehpjonWWyvx2EcaG+ekv//Dr8HMCOpIUpcwrs82R2hRv8wt6hcx4XagdACqGu+sr9Rf/ATKelG8xk/dlIz9Pc9uGL/G6rHjwVCk8MydVlgWgVtoHDcmSmzBYqvwZKAjfJlfXKV5F4MoBv/MY7sgvRNB5hNWna3MhXg7suFnWuVg6EXZZpD1KoDXrRXON2LlEk110uBAi3fF3vmCc6/EmByG3NhlJzMOW+gTGr2ffHGuLRmgssSTjgilnjH3Fvl5oJ3kjdWkj0HGwn89RFUP8TLBD0kWn7iQc/YGGKYqPBQ5yr30J1rqkUAHCQBFCUk0QRc16EUiRtKWADsEnIJN+rekopKTpC3wndkV0eJUu2rOfYqs/DeiV9ap70tJ+/a1kx447UKzHYHv/gf4Em9HHdo756Q3aBOc9i9Zc6qxqo8uUvMMFrlSG1wt1wNHgRkf/dW/KTkWb/c5qNyohjA+qk5T5S0ZmzB/d9iqNb/6uzavT70VNPy16YTKC6JBvinZxHmP/WRGr2qBqA==

ks_setExtVal->调用
RSA_模数->52110003087323699561353761917261823872954257632572289784106652042350914909897
RSA_公钥->105683

      



   
   

ks_setSoftVal->调用
软件编号->1000001
软件密钥->33hZA9Qzq3758USLw6B4CKI4


date->
9255fcee1d2527a947fc30618dee2b404dd49a1d34a23fee7ac9c9d45641796b1ce9c12ccd47d8c05992b1ba21162360cc12a728521c7243414630ff300270edfe51294e98870aed4e7144adc4c69a27ce9606171e3969b7405e8a94c74156f19b6f4eadced31d8487d73c78b4fa5c745c3788d4f15cbb013fb4a8045201b208a28e004f6baefa35618dfd5304b3ee61e05492b483eb0add5d0ca092bc2a0cc8042b9d57588b3984ada856c0829d15883eaa262828f8ddfb00972d17fb624b1799eb01a09afa144fea4377d43fa7abb2e601f7a8b38817aa8ea256768d06558dd06e2f74d1e285b8342fb08f2c60ac94661edfba1178b196a41ecafebea02c32f0418d410259eb068c10888d04a9fe3c0f42c7e3d8fb474677ae505384e12ec82dfebc2e96693e59a83bfe2d3f51e0567e97f46b2412406871b86b2e47a5939629fc88e3758595a9b2055516a58eab341902f968642112912cfe36ae780403c867418e740d459c35bee61bb4a7c06fdcbcd6660d88f96445b17225df01762efe59174676bd74a277014cb33093d3ae39

2a99 发表于 2016-4-15 09:09

都是大牛，学习了。

坏坏LLLLLL 发表于 2016-4-15 12:39

hu110356776 发表于 2016-4-15 01:35
有一个API虽然是 动态得..但是 算法是 A+B

SignData:


谢谢你 因为这个办法我已经试过了 并没有功能{:5_187:}

坏坏LLLLLL 发表于 2016-4-15 13:06

暴爆 发表于 2016-4-15 02:55
ks_setLicense->调用
TAoLJqnv+c4REZc1U8eSLibEfikPd8SP1cjxdVac1x9rh5NXLkONdl004S9Ld6w5/f8RqRBOk3oW1ra ...

谢谢爆爆大哥 可惜我并没有后台可以山寨

62596729 发表于 2016-4-15 18:44

坏坏LLLLLL 发表于 2016-4-15 20:50

62596729 发表于 2016-4-15 18:44
这个软件有功能验证，我弄过的，要hook好几次

恩 求解释下
页: [1]
查看完整版本: 一个让人想吐的可可