Method and device for processing dynamic link library (DLL) file

A technology of a dynamic link library and a processing method, which is applied in the field of processing DLL files of a dynamic link library, and can solve the problems of destroying the genuine software management system and affecting the interests of genuine software suppliers, etc.

Active Publication Date: 2010-12-08
ZHEJIANG SUPCON SOFTWARE +1
View PDF4 Cites 59 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] However, since the DLL files in the prior art exist in the form of complete independent files, even if these DLL files are digitally signed, and the digital signature is verified before loading the DLL file, the cracker can still locate the independent file by locating the DLL file. The location of the file, and find and replace the public key used in the digital signature with a static debugging method, and then forge the digital signature of the DLL to load the DLL file, thereby destroying the genuine software management system and using the software for free, affecting the genuine Benefits for Software Vendors

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for processing dynamic link library (DLL) file
  • Method and device for processing dynamic link library (DLL) file
  • Method and device for processing dynamic link library (DLL) file

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0055] For reference and clarity, technical terms, abbreviations or abbreviations used hereinafter are summarized as follows:

[0056] CRC check: Cyclic Redundancy Check, cyclic redundancy check code, is a commonly used error checking method;

[0057] DES: The symmetric cryptosystem in the cryptographic system is a symmetric cryptosystem encryption algorithm developed by IBM Corporation of the United States in 1972.

[0058] API: Application Programming Interface, application programming interface;

[0059] DLL: Dynamic Link Library, a dynamic link library, is a library containing code and data that can be used by multiple programs at the same time;

[0060] PE: Portable Execute, file extensions include EXE, DLL, OCX, etc.;

[0061] RVA: Relative Virtual Addresses, relative virtual address;

[0062] IAT: Import Address Table, import address table;

[0063] The following will clearly and completely describe the technical solutions in the embodiments of the present invention...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention discloses a method and a device for processing a dynamic link library (DLL) file. The processing method is characterized in that: the DLL file containing a key code and serving as a resource (specifically a binary resource) is embedded into an application program, wherein the DLL file is not an independent file any more and a cracker cannot easily locate the positions of the key code and the DLL file; and meanwhile, the DLL file is loaded without directly using a Load Library API function any more, the whole loading process is performed in a dynamic loading mode, and the key code of an import function in the DLL file is associated with the actual address of the import function to establish dynamic link by repositioning the actual and virtual addresses of the DLL file and modifying an entry address of the import function in an IAT table so that the cracker has difficulty in judging the time and address of actually loading the DLL file and the technical effect of securely loading the DLL file is achieved.

Description

technical field [0001] The invention relates to the technical field of software maintenance, and more specifically, relates to a method and a device for processing DLL files of a dynamic link library. Background technique [0002] At present, genuine software needs to be authorized by a software certificate before it can be used. How to protect genuine software from being illegally cracked and used for free by crackers and harming the interests of software suppliers, the management of the genuine software authorization is very important. [0003] The existing legitimate software management is mainly aimed at the management of key codes with confidentiality effects. This management method is mainly through setting the key codes in the external security device in the form of DLL independent files, such as hardware dongle drivers, or in In the API interface module of the network remote certificate server, the DLL is loaded through a static link or a dynamic link (calling an API...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/22G06F9/445G06F21/14G06F21/52
Inventor 苏宏业叶建位荣冈古勇
Owner ZHEJIANG SUPCON SOFTWARE
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products