-
-
[求助]请大家给个思路,一个软件的脱壳!!!
-
发表于:
2006-6-14 20:10
3646
-
用ArmaFP查保护方式,结果如下:
<------- 14-06-2006 20:01:28 ------->
D:\wjjsoft\hce\hce.exe
!- Protected Armadillo
?- Signature = 1C10B024
Protection system (Basic)
!- <Protection Options>
Debug-Blocker
CopyMem-II
Enable Strategic Code Splicing
Enable Memory-Patching Protections
!- <Backup Key Options>
Fixed Backup Keys
!- <Compression Options>
Best/Slowest Compression
!- <Other Options>
Disable Monitoring Thread
!- Child detach
Child process ID: 000007C0
Entry point: 006C6B00
Original bytes: 558B
我根裾大侠的文章,调试了几回,都遇到"调试程序无法处理异常"而终止.
这个壳该怎样去脱,请大家给个思路!!!!感谢!!!!!
[课程]Linux pwn 探索篇！
