查殼脫殼工具介紹(圖)

軟體加殼，可以起到壓縮自身體積，防止資源被修改，同時也提高了破解難度的目的。我們調試一個軟體，非壓縮殼一般都需要先脫殼修複程式後方可調試。常見的加殼工具我們將在下文給予介紹。這裡我們先來介紹一下查殼及通用脫殼工具。
常見的程式編寫語言有：
Borland Delphi 6.0 - 7.0
Microsoft Visual C++ 6.0
Microsoft Visual Basic 5.0 / 6.0
還有彙編、易語言等。
　
I 查殼工具介紹：
　
我們在很多破解教程中都能夠看到這個查殼工具fileinfo.exe（簡稱fi），由於很久都沒有更新，故不推薦大家使用。目前大家常用的查殼工具主要有PEiD v0.94 和 DiE 0.63 漢化版。本人感覺DiE 0.63的功能更強大些。軟體介面如所示：（漢化版下載，詳見附件）


 II 通用脫殼機介紹：
現在比較好用的通用脫殼工具這裡推薦兩個：
　
1.RL!dePacker 1.3
官方地址：ap0x.jezgra.net
官方下載：http://ap0x.jezgra.net/unpackers.html
漢化版下載，詳見附件。

 目前該脫殼機已經支援以下84種殼的脫殼。到該軟體的官方，還可以下載到其他的脫殼工具，這裡就不一一列舉。
　
RL!dePacker is tested with 84+ packers:
　
UPX 0.8x - 2.x [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
HidePX 1.4 [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
ASPack 1.x - 2.x
eXPressor 1.2.x - 1.4.x
EZip 1.0
MEW 1.x
NeoLite 1.0 & 2.0
JDPack 1.x
JDProtect 0.9
nSPack 2.x - 3.x [use GenOEP to detect true OEP and Force OEP option in all cases!]
PECompact 1.x - 2.x
WWPack32 1.x
WinUPack 0.2x - 0.3x
PeX 0.99
PC Shrink 0.71
Polyene 0.01
FSG 1.xx & 2.0
PackMan 0.0.0.1 & 1.0
UPolyX 0.4 & 0.5
UPXRedir [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
UPXCrypt [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
32Lite 0.3a
Stone`s PE Encryptor 2.0
NWCC
HidePE 2.1
StealthPE 2.1
PE Diminisher 0.1
ORiEN 2.12
AHPack 1.x
Software Compress 1.x
PolyCrypt PE 2.1.5
PeTite 1.x
SPLayer 0.08
ShrinkWarp 1.4
[G!X]`s Protector 1.2
!ExE Pack 1.x
LameCrypt 1.0
Winkript 1.0
SPEC b3
DEF 1.0
EP Protector 0.3 [don`t use GenOEP function since it is jammed!]
SmokesCrypt 1.2
dot Fake Signer 3.x
VirogenCrypt 0.75
UPX Inkvizitor [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
UPXFreak 0.1 [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
dePack
Simple UPX-Scrambler[use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
BJFNT 1.3
PEStubOEP 1.6
KByS Packer 0.2x
PELockNT 2.x
aUS [Advanced UPX Scrambler] 0.4 - 0.5
hmimys-Packer 1.x
nPack 1.x
UPolyX 0.x [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
PePack 1.0
UPXLock 1.x [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
PC PE Encryptor alpha [use GenOEP to detect true OEP in all cases!]
UG Chruncher 0.x
UPX-Scrambler RC 1.x [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
UPX Protector 1.0x [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
UPXShit 0.06 & 0.0.1 [use GenOEP to detect true OEP in Delphi case! UPX 2.x STUB]
yC 1.0
SimplePack 1.x
RLPack Basic Edition 1.x
BeRoEXEPacker 1.x
PackItBitch
PEncrypt 4.0 [use GenOEP to detect true OEP in all cases!]
ReCrypt 0.15 - 0.80 [and all other versions that do not use API redirection, use Tracer option to fix IAT]
PEnguinCrypt 1.0
UPXScramb 2.x
tELock [use Tracer option to fix IAT on versions higher than 0.80]
yC [use Tracer option to fix IAT on versions higher than 1.1]
CryptoPeProtector 0.9x [use Tracer option to fix IAT on all versions]
SLVc0deProtector 1.x [use Tracer option to fix IAT on all versions, manually fix stolen code]
ARMProtector 0.x
EXEStealth 2.x [use Tracer option to fix IAT on all versions]
PeLockNt 2.x
Perplex PE-Protector 1.x [use Tracer option to fix IAT on all versions]
CodeCrypt 0.16x
!EP (ExE Pack) 1.x [without Morphine protection]
Krypton 0.x [use Tracer option to fix IAT on all versions]
OrIEN 2.1x [use Tracer option to fix IAT on all versions]
　
2.QuickUnpack V1.0 RC1
官方地址：http://qunpack.ahteam.org/
官方下載：http://qunpack.ahteam.org/wp-content/uploads/2007/03/quickunpack10rc1.zip
 
更多資訊：http://upxshell.sourceforge.net
官方下載：http://nchc.dl.sourceforge.net/sourceforge/upxshell/UPXShell-3.4.2.2007-Setup.exe