脱壳的入门篇（An introductory chapter on shelling）.docVIP

脱壳的入门篇（An introductory chapter on shelling） Preface You recall, learning Crack technology has been for 2 months, while I learned far more than any previous year I learned more (understand refers to computer programs and systems) When it comes to learning is shelling last months time, to always ask around learning shelling, most of the answers is to see the snow bosss book, who also did not answer. Then find out on their own, have a little thought, the bosses estimate is that more suitable for our behoove, it is plainly a. Here I have a back is in fact the main display slight skill before an expert, to help some friends can quickly touch the door, not only to follow, the answers to the questions I want to ask this is my original, there are some very basic things, dont speak well please master. Thank you for watching the snow boss so provides a good forum for all to learn, rookie also wrote a very good book guide like me, also thank the many online master contribute their special thanks to the shelling notes, heXer boss on the rookies careful guidance! By the way, shelling requires special interest and patience, if not patient Theres a lot of crap. Lets get down to business Combining the new KG of baby Wom, talk about a simple analysis of a shell in general One, find OEP The general process of shelling is: check shell for OEP-Dump- repair, Theres nothing to say about hull, FI and PEiD, unfortunately, neither FI nor PEiD can identify the shell: My general idea of finding OEP is as follows: To see whether the shell is an encrypted shell or compressed shell, compressed shell relatively easy, generally no exception, to find the corresponding POPAD, you can access to the entrance, the general way to jump to the entrance 1, JMP OEP 2, push OEP Ret 3, call OEP Of course, there are other, such as JE, OEP, etc., are generally a large jump between paragraphs, OD Disassembly window is the same section of the content, so better distinction is whether the jump between paragraphs H