PE loader-based software packing protection method

A software and protected technology, applied in the field of software packing protection based on PE Loader, can solve the problems of illegal tampering, easy software, cracking, etc., and achieve the effect of increasing security, increasing difficulty, preventing disassembly and cracking and illegal tampering.
CN101964040AInactive Publication Date: 2011-02-02XIAN UNIV OF TECH

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
XIAN UNIV OF TECH
Publication Date
2011-02-02
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention relates to a PE loader-based software packing protection method. The method comprises the following steps of: mapping a shell template into an internal memory, repositioning the base address of the shell template by simulating a PE loader of Windows and calculating a relative virtual address (RVA) of a segment where the entry point of the shell template is positioned and the size of the segment, wherein the calculated RVA value of the segment and the size value of the segment are taken as parameters and a hash value calculated by a secure hash algorithm (SHA) is taken as a key of an advanced encryption standard (AES) encryption algorithm; mapping protected software into the internal memory and encrypting the protected software by the AES encryption algorithm by using calculated key; adding encrypted data into a Reloc segment of the shell template; processing a special resource in the software to be protected and extracting additional data of the special resource, attaching the special resource and the additional data to the end of a shell template file respectively and modifying a corresponding data item related to the special resource in the PE structure of the shell template; and repeating the modified shell template from the internal memory to a disc so as to obtain protected software. The method remarkably enhances the safety of the software.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the technical field of computer software program protection, aims at the problem of illegal tampering and cracking of software, and specifically relates to a software packing protection method based on PE Loader. Background technique

[0002] Software protection is a link that cannot be ignored in software development. Since software development has to face the research of many reverse analysts, it is almost a necessary step to protect the software to add a protective shell to the released software. The existing packing protection technology generally points the entry point (Entry Point) of the executable file (here mainly refers to the PE file of the Win32 platform) to the shellcode of the shell, and compresses or encrypts the original executable file, and then compresses or encrypts the shellcode of the shell. The shellcode is added as a new segment of the target program. The shellcode is executed first during runtime, and is...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More