各位大侠;我有一个软件;是由1个exe文件和1个dll文件构成。dll文件采用PEtite 2.1 -> Ian Luck加壳;我采用enlarge进行脱壳并进行了检查。发现脱壳正确。但是现在的问题是:
运行exe文件时,无法正确调用dll文件。
下面是脱壳前dll文件开始信息,和脱壳后dll文件开始信息;确实不同,那个大侠,特别是看雪老大,能告诉下用什么工具,如何修改,使exe可以调用脱壳后的dll文件。急!多谢了!
未脱壳前dll文件开始信息:
disassembly file :d:\a.dll
Code offset= 00002000, Code size=0003D400
Data offset= 00002000, Data Size=0003D400
Number of Objects = 0005(dec), Imagebase = 00400000h
Object1: RVA 00001000 Offset: 00002000 Size:0003D400 Flags:60000060
Object2: RVA 0007C000 Offset: 00000000 Size:00000000 Flags:C0000000
Object3: RVA 0007D000 Offset: 00000000 Size:00000000 Flags:C0000040
Object4: .petite RVA 00089000 Offset: 0003F400 Size:0000DA00 Flags:50000040
Object5: RVA 00097000 Offset: 00000400 Size:0001C000 Flags:E2000060
未脱壳后dll文件开始信息:
disassembly file :d:\a_1.dll
Code offset= 00000400, Code size=00078200
Data offset= 00000400, Data Size=00078200
Number of Objects = 0006(dec), Imagebase = 00400000h
Object1: A RVA 00001000 Offset: 00000400 Size:00078200 Flags:60000060
Object2: B RVA 0007A000 Offset: 00078600 Size:00001E00 Flags:E0000060
Object3: C RVA 0007D000 Offset: 0007A400 Size:00002600 Flags:E0000060
Object4: D RVA 00080000 Offset: 0007CA00 Size:00000000 Flags:E0000060
Object5: E RVA 00081000 Offset: 0007CA00 Size:00004000 Flags:E0000060
Object6: F RVA 00089000 Offset: 00080A00 Size:0000DA00 Flags:E0000060
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!