一个绿色软件,我就想修改一下他的窗口标题
用的 PE Explorer 1.99 加载,给出的提示如下:
30.12.2010 10:22:35 : File size: 1840128 bytes.
30.12.2010 10:22:35 : 使用插件子系统...
30.12.2010 10:22:35 : NsPack Unpacker Plug-in: Executing...
30.12.2010 10:22:35 : NsPack Unpacker Plug-in: <NsPack> The file is not NsPacked
30.12.2010 10:22:35 : NsPack Unpacker Plug-in: 没有完成。
30.12.2010 10:22:35 : Upack Unpacker Plug-in: Executing...
30.12.2010 10:22:35 : Upack Unpacker Plug-in: <Upack> The file is not Upacked
30.12.2010 10:22:35 : Upack Unpacker Plug-in: 没有完成。
30.12.2010 10:22:35 : UPX Unpacker Plug-in: Executing...
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> File compressed with UPX
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> UPX version: 13
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> File type: win32/pe
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Compression method: NRV2E_LE32
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Compression level: 7
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Uncompressed size: 4149896 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Compressed size: 1799335 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Original file size: 4099072 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Filter ID: 26h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> CTO (for filters 21h .. 29h, 36h, 46h, 49h): 32h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Link checksum: From the header = D9h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Link checksum: Calculated = D9h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Compressed adler32: From the header = F0CAE9E1h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Compressed adler32: Calculated = F0CAE9E1h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Decompressing...
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Uncompressed adler32: From the header = 92F7C346h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Uncompressed adler32: Calculated = 92F7C346h
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> File has an original PE header (can be recovered).
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Unfiltering...
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Rebuilding Image...
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .text 1780736 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .data 1985024 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .rdata 130048 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .bss 0 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .edata 512 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .idata 52736 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .rsrc 38400 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Section: .reloc 110592 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: <UPX> Decompressed file size: 4099072 bytes
30.12.2010 10:22:35 : UPX Unpacker Plug-in: 已处理
30.12.2010 10:22:35 : MS-DOS 文件头大小: 0040h
30.12.2010 10:22:35 : MS-DOS 文件头: OK
30.12.2010 10:22:35 : 下一个文件头偏移量: 0080h
30.12.2010 10:22:35 : PE 署名: OK
30.12.2010 10:22:35 : 计算校验和: 成功 (文件头校验和: 00000000h / 实际校验和: 001C27C0h)
30.12.2010 10:22:36 : EOF 位置: 003E8C00h (4099072)
30.12.2010 10:22:36 : 错误! (步骤: 检验 区段头)
30.12.2010 10:22:36 : 完成!
应该是有UPX壳,用UPXUnPacKer v0.3自动脱壳,成功,可以正常运行
再用PE Explorer 1.99加载,提示
30.12.2010 10:31:26 : UPX Unpacker Plug-in: Executing...
30.12.2010 10:31:26 : UPX Unpacker Plug-in: <UPX> The file is not UPX-packed
30.12.2010 10:31:26 : UPX Unpacker Plug-in: 没有完成。
30.12.2010 10:31:26 : 插件子系统完成。
30.12.2010 10:31:26 : MS-DOS 文件头大小: 0040h
30.12.2010 10:31:26 : MS-DOS 文件头: OK
30.12.2010 10:31:26 : 下一个文件头偏移量: 0080h
30.12.2010 10:31:26 : PE 署名: OK
30.12.2010 10:31:26 : 计算校验和: 成功 (文件头校验和: 003F2098h / 实际校验和: 003E91B7h)
30.12.2010 10:31:26 : EOF 位置: 003E8C00h (4099072)
30.12.2010 10:31:26 : 错误! (步骤: 检验 区段头)
30.12.2010 10:31:26 : 完成!
仍然无法编辑各种资源。
请问大家这是怎么回事,我应该怎么做啊?
先拜谢了!
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课