@nicker wrote:
软件地址:http://www.corecode.at/uninstallpkg/
软件版本:v1.0.20(969)
系统环境:OS X 10.11方法1:
修改 ~/Library/Preferences/com.corecode.UninstallPKG.plist的Usages属性,只要小于5,就可以一直试用下去方法2:
经过Hopper分析,该程序判断注册没有的关键函数是[Paddle productActivated]方法,hook这个方法返回true就大功告成了代码:
#import "CaptainHook.h" //https://github.com/rpetrich/CaptainHook CHDeclareClass(Paddle); CHMethod(0, BOOL, Paddle, productActivated) { return YES; } __attribute__((constructor)) static void entry() { CHLoadLateClass(Paddle); CHClassHook(0, Paddle, productActivated); }
编译生成libUninstallPkgCracked.dylib
只需要UninstallPkg程序加载我们的dylib,就可以破解了
加载dylib的方法有很多,我们这里用DYLD_INSERT_LIBRARIES打开目录/Applications/UninstallPKG.app/Contents/MacOS/
复制libUninstallPkgCracked.dylib到该目录下
修改UninstallPKG为UninstallPKG_
新建UninstallPKG,文本编辑器输入一下内容:#!/bin/bash UP_PATH="`dirname "${0}"`" UP_BIN="`dirname "${0}"`"/UninstallPKG_ export DYLD_INSERT_LIBRARIES="${UP_PATH}/libUninstallPkgCracked.dylib" "$UP_BIN"
保存,添加可执行属性
chmod 755 UninstallPKGOK,再打开UninstallPKG试试,已经没有注册提示了
Posts: 1
Participants: 1