RL!dePacker v1.5 英文免费版

RL!dePacker有一个检测OEP的选项。然而，此选项不起作用用VB（总是使用FindOEP！用VB的应用程序和部队手册的OEP的功能？）和一些加壳。因此，如果RL！dePacker无法解压缩文件使用FindOEP！功能检测到正确的OEP，但只使用它作为第二个手段，因为它可以被卡住！ °股权队的OEP手册地址用于强制停止手册OEP的地址，使用此选项只有当封隔器不能解压（目标运行，而不是在打破单程证或在错误的OEP转储）。 °选项正确的OEP手册地址是用来解压缩文件的PE头的正确的OEP。 °选项隐藏检测解压使用antiTricks检测被隐藏的调试器。选项​​使用示踪剂，以正确的IAT是用来删除所有已知的重定向类型。 ·选择修复导入消除用于搬迁内存外PE32文件导入表的应用程序。此选项已经过测试，AlexProtector 1.0和RLPack TE 1.18。请注意，即使道琼斯此选项是在测试中，它应该给所有已知的重定向类型了良好的效果（见TitanEngine）。 °选项从磁盘粘贴PE.Header使用正确粘贴到原来的解压缩文件的PE头。 通用解压解压只封隔器不使用的IAT重定向，不偷的API和IAT表填写正确的顺序。所有可转换为API名称的序号转换，另一些则插入阿尔特为序！专为NT系统上，Windows 2000或更高，但如果你有PSAPI.DLL文件，它应该在Windows Millennium工作！ 请注意，这个解压不与AV /防火墙软件（这意味着卡巴斯基）挂接在ring3 LoadLibrary和GetProcAddress工作。如果你不想改变你的“AV / FW的解决方案在虚拟机上运行这个解压。然后，它应该正常工作。 什么是新的： - 更新了发动机部件与unrealeased SDK 1.5库 - 测试与更加壳 - 小额解压变化 RL!dePacker has a build in option to detect OEP. However this option does not work with VB (always use FindOEP! function with VB applications and Force to manual OEP?) and some packers. So if RL!dePacker can not unpack the file use FindOEP! function to detect correct OEP, but use it only as a second resort since it can be jammed!° Option Force OEP to manual address is used to force stopping on manual OEP address, use this option ONLY if packer can not be unpacked (the target runs instead of breaking at OEP or dumps at wrong OEP). ° Option Correct OEP to manual address is used correct OEP in PE header of the unpacked file.° Option Hide unpacker from detection is used hide debugger from being detected by antiTricks. Option Use tracer to correct IAT is used to remove all known redirection types.° Option Fix Import elimination is used on applications that relocate import table in memory outside PE32 file. This option has been tested with AlexProtector 1.0 and RLPack TE 1.18. Please note that even dow this option is in testing it should give good results on all known redirection types (see TitanEngine).° Option Paste PE.Header from disk is used correct paste original PE header to the unpacked file. Generic unpacker can unpack ONLY packers that do not use IAT redirection, that don’t steal APIs and which fill out IAT table in correct order. All ordinals that can be converted to API names are converted, others are inserted into IAT as ordinals! Designed for NT systems, Windows 2000 or later but it should work on Windows Millenium if you have psapi.dll file!Please note that this unpacker does NOT work with AV/FW software (this means Kaspersky) which hooks LoadLibrary and GetProcAddress in ring3. If you do not want to change your AV/FW solution run this unpacker in VM. Then it should work fine.What is new:- Updated engine parts with unrealeased SDK 1.5 libraries- Tested with even more packers- Minor unpacker changes