|
Instead of hooking, I'v a better idea.
After appearing the registration from (created by DLL), we are sure that DLL is extracted/loaded completely. Its better to get the list of imported DLLs and get the address of serial-check function by GetProcAddress in one loop.
Now, how could I get the import list? only DLLs names.
My problem about reading PE headers almost solved. If i could find any address from the loaded DLL, I could find its PE header by a simple search algo.
The license manager is : CoLock
hxxp://www.colock.com/
It's a funny license manager !!
Last edited by Newbie_Cracker; 03-12-2005 at 04:06.
|