<html xmlns:o="urn:schemas-microsoft-com:office:office"
xmlns:w="urn:schemas-microsoft-com:office:word"
xmlns:st1="urn:schemas-microsoft-com:office:smarttags"
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="ReadMe_files/filelist.xml">
<title>History</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>JAGODINAC</o:Author>
<o:Template>Normal</o:Template>
<o:LastAuthor>JAGODINAC</o:LastAuthor>
<o:Revision>24</o:Revision>
<o:TotalTime>22</o:TotalTime>
<o:Created>2007-02-02T12:32:00Z</o:Created>
<o:LastSaved>2007-02-14T21:05:00Z</o:LastSaved>
<o:Pages>1</o:Pages>
<o:Words>680</o:Words>
<o:Characters>3882</o:Characters>
<o:Lines>32</o:Lines>
<o:Paragraphs>9</o:Paragraphs>
<o:CharactersWithSpaces>4553</o:CharactersWithSpaces>
<o:Version>11.5606</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:Zoom>84</w:Zoom>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if !mso]><object
classid="clsid:38481807-CA0E-42D2-BF39-B33AF135CC4D" id=ieooui></object>
<style>
st1\:*{behavior:url(#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:536871559 0 0 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;
text-underline:single;}
p
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=blue style='tab-interval:36.0pt' leftmargin=0
topmargin=0 marginwidth=0 marginheight=0>
<div class=Section1>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%"
style='width:100.0%;mso-cellspacing:0cm;mso-padding-alt:0cm 0cm 0cm 0cm'>
<tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes'>
<td style='background:#666666;padding:0cm 0cm 0cm 0cm'>
<p class=MsoNormal><strong><span style='font-size:10.0pt;font-family:Verdana;
color:white'> RL!dePacker v1.4</span></strong></p>
</td>
</tr>
</table>
<div>
<p align="justify" class=MsoNormal><br>
<strong><span style='font-size:10.0pt;font-family:Verdana'> <span
style='color:#FF9900'>::</span> Tehnical info:</span></strong><b><span
style='font-size:10.0pt;font-family:Verdana'><br>
</span></b><span style='font-size:10.0pt;font-family:Verdana'> RL!dePacker
has a build in option to detect OEP. However this option does not work with
VB (always use FindOEP! function with VB applications and Force to manual
OEP?) and some other packers. So if RL!dePacker can not unpack the file
use <strong><span
style='font-family:Verdana'>FindOEP! </span></strong>function to detect correct
OEP, but use it only as a second resort since it can be jammed!<br>
° Option <strong><span
style='font-family:Verdana'>Force OEP to manual address</span></strong> is used<strong><span
style='font-family:Verdana'> </span></strong>to force stopping on manual OEP address,
use this option ONLY if packer can not be unpacked (the target runs instead
of breaking at OEP or dumps at wrong OEP). <br>
° Option <strong><span
style='font-family:Verdana'>Correct OEP to manual address</span></strong> is used<strong><span style='font-family:Verdana'>
</span></strong>correct OEP in PE header of the unpacked file.<br>
° Option <strong><span style='font-family:Verdana'>Hide
unpacker from detection</span></strong> is used<strong><span style='font-family:
Verdana'> </span></strong>hide debugger from being detected by antiTricks. Option
<strong><span style='font-family:Verdana'>Use tracer to correct IAT</span></strong>
is used<strong><span style='font-family:Verdana'> </span></strong>to remove
all known redirection types.<br>
° Option <strong>Fix Import elimination</strong> is used
on applications that relocate import table in memory outside PE32 file.
This option has been tested with AlexProtector 1.0 and RLPack TE 1.18. Please
note that even dow this option is in testing it should give good results
on all known redirection types (see <a href="http://ap0x.jezgra.net/sdk.html">ap0x
unpacker SDK</a>).<br>
° Option <strong>Paste PE.Header from disk</strong> is used<strong><span style='font-family:Verdana'>
</span></strong>correct paste original PE header to the unpacked file. <br>
<br>
Generic unpacker can ONLY unpack packers that do not use
IAT redirection, that don’t steal APIs and which fill out IAT table
in correct order. To unpack packers that use redirections or import elimination
set the unpacker options to match your case. All ordinals that can be converted
to API names are converted, others are inserted into IAT as ordinals! Designed
for <strong><span style='font-family:
Verdana'>NT systems</span></strong>,<strong><span style='font-family:Verdana'>
Windows 2000</span></strong> or later but it should work on <strong><span
style='font-family:Verdana'>Windows 9x</span></strong> if you have psapi.dll file!<br>
If you get a virus/tojan warning and you have downloaded
the program from the official website be assured that there is no virus
present in the package and that your anti virus is making a <strong>false
positive</strong> detection!<br>
<br>
<strong><span style='font-family:Verdana'> <span style='color:#FF9900'>::</span>
Can I report a bug or contact the autor?</span></strong><b><br>
</b> Here is the contact information which you can use
to contact me:<br>
<em><span style='font-
RL!dePacker.rar （9个子文件） 
RL!dePacker 
GenOEP.dll 6KB Tracer.dll 16KB HideDebugger.dll 5KB Debugger.dll 11KB Importer.dll 10KB Dumper.dll 9KB
ReadMe.html 17KB Realign.dll 8KB
RL!dePacker.exe 26KB资源评论
pyflying2012-08-07这个工具还不错，可以用的！
