换句话说ARM的弱点真正地方是：
1125:  E9  8B
1126:  D6  4E
1127:  5A  44
1128:  01  6A

最初由 newpp 发布


问一下：我看到他们(Real|sty 好像之前不是用这种方式patch,应该是相互学习来的)在壳里改几个bytes 经过一番读读解解,再call eax到去空白处(一般应该可以)
而DzA Patcher 是开一个新节区放自己的程式码再转到原先的程式码

........

that way of inline patching alread used by fly long time ago...:)
but this way of inline patch asprotect has a limitation in the latest version...u have to change a lot of bytes in the exe and the only location u can jump is the pe section..and write ur own patch there....pretty small location...:(..because latest asprotect will delete clear all the code at "adata" section when it's run....but revengecrew team way of inline patching can avoid that....and u can even add section to the exe if u wish just u need to change back the bytes to the original bytes to maintain the crc...

Dza patch默认就是在空白处打patch,新添section是一个选项.

最初由 peaceclub 发布
Dza patch默认就是在空白处打patch,新添section是一个选项.

还有一点我觉得奇怪，ARM也不是这么简单说跳就跳过试用期框吧，有没有搞错。这么搞，那不跟一张纸一样。

真时奇怪？

还是不服气？就是 dza_patcher.exe

  记得当时0DAY也有一个ASPR的INLINE CRACK。BUT 忘记是哪个RLS了-_-

最初由 stephenteh 发布

that way of inline patching alread used by fly long time ago...:)
but this way of inline patch asprotect has a limitation in the latest version...u have to change a lot of bytes in the exe and the only location u can jump is the pe section..and write ur own patch there....pretty small location...:(..because latest asprotect will delete clear all the code at "adata" section when it's run....but revengecrew team way of inline patching can avoid that....and u can even add section to the exe if u wish just u need to change back the bytes to the original bytes to maintain the crc...

谢啦!

最初由 forgot 发布
还是不服气？就是 dza_patcher.exe

我已经经过证实了，不是这玩意。我看过他的硕思精灵ARM3.78的破解，是真正直接PATCH，利用的ARM漏洞爆破，纯粹的爆破根本是不可能直接内插式PATCH的。