Software cracking-shell Checking Software

Want to crack the software? The first thing to do is to check the shell. The so-called shell check is to use several specific shell check tools (that is, software) for analysis.ProgramType, the language or compiler used by the program to be checked, or whether the program is shelled for protection.
Common compilation languages include visual C ++, Visual Basic, Borland C ++, and Borland Delphi. Shelling protection adds a "coat" to the outside of the program to reduce the file volume or protect the original file. When running the program, the shell can decompress and restore the original file.
Common casings include ASPack, UPX, pecompace, and asprotect.
The following describes several shell checking tools: fileinfo (Fi for short). Fi runs on the DOS interface. The following methods are used.
1. Run the command on the DOS interface... It is not described here because it is very inconvenient. If you are interested, click Baidu.
Upload)
3. first create a shortcut for Fi, and then put the shortcut in the Windows/sendto folder. In this way, you can right-click the file and choose send to fi.
In general, I don't often use Fi to check the shell. I think he is in trouble ~~~

The next shell check tool is called peid, short for peid thing PE identifier. It is a tool similar to fileinfo and has a GUI that can detect more than 300 different file types, strong shell check capability.
The peid GUI is very intuitive and convenient,
 

 

Some of the following information will be used by friends interested in this article.

Pe-armor; Author: hying, an excellent domestic shell, has never published the main program. The author published the latest version 0.765 in the package!
Asprotect, the leader of shell, has created a new era of shell. Because it is so famous, everyone has studied it very well. It is not recommended to protect valuable software.
Armadillo; only custom has complete functions. Many commercial software uses it as shelling and has good stability. It is too famous to be cracked.
Acprotect; Domestic shell, the Shell Deformation well done, the strength is good, but the study is much, has not much strength.
Vprotector; Domestic shell, author vcasm, a good protective shell, multi-thread use very skilled.
Pelock; a medium-strength shell that has not been updated for a long time.
Execryptor is a powerful shell and is recommended, especially its virtual machine protection function.
Themida; an outstanding commercial protective shell, highlighted in its virtual machine encryption function.
Vmprotect is a protection software that uses pseudo-command virtual machines to protect Code . Recommended! No decompilation tool has been found.
Telock; but it has nothing but anti and has not been updated for a long time.
Obsidium is an excellent shell with medium strength. It can be encrypted in blocks and relocated to exe.
Xtreme-Protector; this can be said to be the most powerful shell at present, but also the most skilled driver shell, but not compatible.
SVK; this shell has a deep background, that is, anticracking. sk.
Dbpe; D. Boy Phantom, not updated for a long time.
PB; the free version of Pb encryptor 1.0.
Pespin is an easy-to-use software encryption (shelling) tool with poor compatibility and stability.
Packers; compression shell.
UPX; classic free compression shell! Excellent compatibility and stability.
ASPack; a good compression shell.
Pecompact; a good compression shell.
Nspack; Because lzma compression engine is used, the compression ratio is very high and the compatibility is good.
Kbys; shoooo shell. Seeing this shell reminds people of Trojans. Due to the abuse of Trojans, other anti-virus software except rising star is generally used as a Trojan.
FSG; the compression ratio is good. Because many Trojans are used, anti-virus software often treats them as Trojans.
Fileinfo; shell check tool. Many new shells cannot be identified because they are not updated for a long time.
Peid; shell checking tool, because it can customize the identification library, so it supports the identification of many new shells, it is recommended to use