-
-
[旧帖] [求助]一天一夜也没搞定Armadillo 2.51 - 3.xx DLL Stub,麻烦高手帮看一下。 0.00雪花
-
发表于: 2008-6-30 00:11 2622
-
PEid查看显示为Armadillo 2.51 - 3.xx DLL Stub -> Silicon Realms Toolworks。
用Arma Find查:
!- Protected Armadillo
Protection system (Professional)
!- <Protection Options>
Standard protection or Minimum protection
!- <Backup Key Options>
Fixed Backup Keys
!- <Compression Options>
Best/Slowest Compression
!- <Other Options>
!- Version 4.40 31October2005
!- Elapsed Time 00h 00m 00s 391ms
搜了些帖子,壳可能是脱掉了,IAT也可能是修复好了。dll可以被加载,但是卡在重定位的
问题上了。
5个dll都是delphi写的。3个RC数据里没有TForm的脱了都好使。另外两个dll里有VCL的
UI的脱了后一出现API调用就挂了,怀疑是没搞定重定位的问题。一天一夜了也没把他拿下,
希望各位前辈给支个招。
原来的文件:
820K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3I4A6N6X3g2Q4x3X3c8K6K9r3q4J5k6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3x3K6x3J5x3U0b7K6i4K6u0r3j5i4g2^5j5g2)9J5k6i4u0S2M7W2)9J5k6h3S2@1L8h3H3`.
脱壳后的(没搞定reloc的)
2d5K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3I4A6N6X3g2Q4x3X3c8K6K9r3q4J5k6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3x3K6x3J5x3U0b7@1i4K6u0r3j5i4g2^5j5g2)9#2k6W2)9J5k6i4u0S2M7W2)9J5k6h3S2@1L8h3H3`.
用Arma Find查:
!- Protected Armadillo
Protection system (Professional)
!- <Protection Options>
Standard protection or Minimum protection
!- <Backup Key Options>
Fixed Backup Keys
!- <Compression Options>
Best/Slowest Compression
!- <Other Options>
!- Version 4.40 31October2005
!- Elapsed Time 00h 00m 00s 391ms
搜了些帖子,壳可能是脱掉了,IAT也可能是修复好了。dll可以被加载,但是卡在重定位的
问题上了。
5个dll都是delphi写的。3个RC数据里没有TForm的脱了都好使。另外两个dll里有VCL的
UI的脱了后一出现API调用就挂了,怀疑是没搞定重定位的问题。一天一夜了也没把他拿下,
希望各位前辈给支个招。
原来的文件:
820K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3I4A6N6X3g2Q4x3X3c8K6K9r3q4J5k6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3x3K6x3J5x3U0b7K6i4K6u0r3j5i4g2^5j5g2)9J5k6i4u0S2M7W2)9J5k6h3S2@1L8h3H3`.
脱壳后的(没搞定reloc的)
2d5K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3I4A6N6X3g2Q4x3X3c8K6K9r3q4J5k6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3x3K6x3J5x3U0b7@1i4K6u0r3j5i4g2^5j5g2)9#2k6W2)9J5k6i4u0S2M7W2)9J5k6h3S2@1L8h3H3`.
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
赞赏
雪币:
留言: