能力值:
( LV3,RANK:20 )
|
-
-
2 楼
想办法让加壳工具认为那个段不能加密就是了。
|
能力值:
( LV2,RANK:10 )
|
-
-
3 楼
谢谢回答!再请问ASPack能排除某个section不将其加壳吗?什么加壳工具可以做倒呢?
|
能力值:
( LV2,RANK:10 )
|
-
-
4 楼
前辈们能不能关注一下我的这个问题?谢谢!
|
能力值:
( LV1,RANK:10 )
|
-
-
5 楼
用别的加壳工具看看被
|
能力值:
(RANK:10 )
|
-
-
6 楼
加壳后手工加上段的共享属性,只需要修改一个字节(section header的最后一个字节)。
|
能力值:
( LV2,RANK:10 )
|
-
-
7 楼
谢谢你!
另外:
加壳后手工加上段的共享属性,只需要修改一个字节(section header的最后一个字节)。――这种方法你实验过吗?我试了不行。
|
能力值:
( LV2,RANK:10 )
|
-
-
8 楼
最初由 baddog911 发布 加壳后手工加上段的共享属性,只需要修改一个字节(section header的最后一个字节)。
能不能再详细讲讲? 怎么修改?
|
能力值:
(RANK:10 )
|
-
-
9 楼
-d
00400000 4D 5A 90 00 03 00 00 00-04 00 00 00 FF FF 00 00 MZ..............
00400010 B8 00 00 00 00 00 00 00-40 00 00 00 00 00 00 00 8.......@.......
00400020 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00400030 00 00 00 00 00 00 00 00-00 00 00 00 F0 00 00 00 ............p...
00400040 0E 1F BA 0E 00 B4 09 CD-21 B8 01 4C CD 21 54 68 ..:..4.M!8.LM!Th
00400050 69 73 20 70 72 6F 67 72-61 6D 20 63 61 6E 6E 6F is program canno
00400060 74 20 62 65 20 72 75 6E-20 69 6E 20 44 4F 53 20 t be run in DOS
00400070 6D 6F 64 65 2E 0D 0D 0A-24 00 00 00 00 00 00 00 mode....$.......
-d
00400080 E9 7C F1 AB AD 1D 9F F8-AD 1D 9F F8 AD 1D 9F F8 i|q+-..x-..x-..x
00400090 57 39 DF F8 B7 1D 9F F8-57 39 83 F8 D4 1D 9F F8 W9_x7..xW9.xT..x
004000A0 9E 3F BA F8 AF 1D 9F F8-57 3E 86 F8 A2 1D 9F F8 .?:x/..xW>.x"..x
004000B0 AD 1D 9E F8 5E 1D 9F F8-57 39 82 F8 8C 1D 9F F8 -..x^..xW9.x...x
004000C0 57 39 A0 F8 AC 1D 9F F8-57 39 DA F8 AC 1D 9F F8 W9 x,..xW9Zx,..x
004000D0 57 39 A2 F8 AC 1D 9F F8-52 69 63 68 AD 1D 9F F8 W9"x,..xRich-..x
004000E0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
004000F0 50 45 00 00 4C 01 06 00-F3 EE 77 41 00 00 00 00 PE..L...snwA....
-d
00400100 00 00 00 00 E0 00 0E 21-0B 01 07 00 00 50 03 00 ....`..!.....P..
00400110 00 F0 A5 00 00 00 00 00-8A 70 02 00 00 10 00 00 .p%......p......
00400120 00 60 03 00 00 00 00 10-00 10 00 00 00 10 00 00 .`..............
00400130 04 00 00 00 00 00 00 00-04 00 00 00 00 00 00 00 ................
00400140 00 50 A9 00 00 10 00 00-00 00 00 00 02 00 00 00 .P).............
00400150 00 00 10 00 00 10 00 00-00 00 10 00 00 10 00 00 ................
00400160 00 00 00 00 10 00 00 00-20 B8 03 00 49 00 00 00 ........ 8..I...
00400170 44 A4 03 00 B4 00 00 00-00 C0 A7 00 80 DB 00 00 D$..4....@'..[..
-d
00400180 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00400190 00 A0 A8 00 5C 30 00 00-C0 63 03 00 1C 00 00 00 . (.\0..@c......
004001A0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
004001B0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
004001C0 00 00 00 00 00 00 00 00-00 60 03 00 B4 03 00 00 .........`..4...
004001D0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
004001E0 00 00 00 00 00 00 00 00-2E 74 65 78 74 00 00 00 .........text...
004001F0 58 42 03 00 00 10 00 00-00 50 03 00 00 10 00 00 XB.......P......
-d
00400200 00 00 00 00 00 00 00 00-00 00 00 00 20 00 00 60 ............ ..`
00400210 2E 72 64 61 74 61 00 00-69 58 00 00 00 60 03 00 .rdata..iX...`..
00400220 00 60 00 00 00 60 03 00-00 00 00 00 00 00 00 00 .`...`..........
00400230 00 00 00 00 40 00 00 40-2E 64 61 74 61 00 00 00 ....@..@.data...
00400240 8C EF A3 00 00 C0 03 00-00 B0 00 00 00 C0 03 00 .o#..@...0...@..
00400250 00 00 00 00 00 00 00 00-00 00 00 00 40 00 00 C0 ............@..@
00400260 53 68 61 72 65 64 00 00-0C 00 00 00 00 B0 A7 00 Shared.......0'.
00400270 00 10 00 00 00 70 04 00-00 00 00 00 00 00 00 00 .....p..........
-d
00400280 00 00 00 00 40 00 00 D0-2E 72 73 72 63 00 00 00 ....@..P.rsrc...
00400290 80 DB 00 00 00 C0 A7 00-00 E0 00 00 00 80 04 00 .[...@'..`......
004002A0 00 00 00 00 00 00 00 00-00 00 00 00 40 00 00 40 ............@..@
004002B0 2E 72 65 6C 6F 63 00 00-22 A2 00 00 00 A0 A8 00 .reloc..""... (.
004002C0 00 B0 00 00 00 60 05 00-00 00 00 00 00 00 00 00 .0...`..........
004002D0 00 00 00 00 40 00 00 42-00 00 00 00 00 00 00 00 ....@..B........
004002E0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
004002F0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
----------------------------------------------------------------------------
Shared最后一个字节
C0 => D0
|
能力值:
( LV2,RANK:10 )
|
-
-
10 楼
谢谢baddog911!
另问:
我是用lordpe直接改的section的属性――是不是这样不行?必须如你所说的那样手工修改?
|
能力值:
(RANK:10 )
|
-
-
11 楼
不太清楚。
我用Visual Studio .NET以二进制方式打开文件,直接C0=>D0保存就可以了。
|
能力值:
(RANK:10 )
|
-
-
12 楼
我以前遇到这个问题时是用aspack压缩的,Shared段D0被改成了C0,段尺寸由12个字节改成了1024字节。D0=>C0就可以用了。
|
|
|