首页
社区
课程
招聘
[转帖]PE-Hide Protector by TDC
发表于: 2006-4-23 10:34 2698

[转帖]PE-Hide Protector by TDC

2006-4-23 10:34
2698
原址:http://www.reversing.be/forum/viewtopic.php?t=498

Hey I've been coding a little protector for PE files.

Let me explain you in short what it does:



- Password protect some EXE (optional though)
- Encrypt the EXE except IAT/RSRC sections
- Encrypt the EXE with password (if user wanted password)
- Ask for password on startup if EXE protected with password



Check the link below for both binary and source, I got the idea of a program called 'vodet' and I've certainly looked at the code to get some idea of how to lay-out the DialogBox in memory for asking the user for a password.

Also I've used Yoda's code to get the kernel base and API addresses when the encrypted EXE starts up.

If you enter some password the EXE will decrypt using that password, then check if some bytes of the OEP still match, if not -> exit.

http://reversemasters.cjb.net/tools/PE-Hide.zip

Have fun,

-- Greetz, TDC



打不开 http://reversemasters.cjb.net/tools/PE-Hide.zip
的可以试试这个网址:
http://reversemasters.gtp-webserver.com/tools/PE-Hide.zip

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 0
支持
分享
最新回复 (6)
雪    币: 93908
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
2
TRY IT!

建议地址hXXP改为http.
2006-4-23 10:44
0
雪    币: 207
活跃值: (40)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
3
这东西bug很多,不能用
看到shoooo patch了输入密码后不能运行的问题
上传的附件:
  • 1.rar (59.85kb,17次下载)
2006-4-23 11:39
0
雪    币: 93908
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
4
shoooo辛苦了
2006-4-23 11:41
0
雪    币: 247
活跃值: (18)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
支持一下,谢谢
2006-4-23 11:56
0
雪    币: 207
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
基本上处理过的 程序 都跑不起
2006-4-23 16:49
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
7
最初由 winndy 发布
原址:http://www.reversing.be/forum/viewtopic.php?t=498


打不开 http://reversemasters.cjb.net/tools/PE-Hide.zip
的可以试试这个网址:
........


okay but
this programmer bug
my easy programmer I see error message
http://www.imagestr.com/imagestr/4302006/51/632819711227773437.JPG

my program running error
2006-4-30 20:18
0
游客
登录 | 注册 方可回帖
返回
//