[Welcome]
Themen-Einstellungen 
Thema abonnieren
Thema drucken
31.01.2013 19:27
|
|
~~~~~~~~~~~~~~~~~ First of all, thanks for trying 20to4. I hope it does what you were looking for. The following few lines should be enough explanation for you to get 20to4 doing what you want. If not, feel free to contact us using info@20to4.net Overview ~~~~~~~~ Syntax: 20to4 [options] [output file] Options: -f Output format 0 Uncompressed file 1 CAB-Dropper 2 PE-Dropper (experimental) -w Set compression window size -o[rniax] Optimise PE structures r Rebuild import table n Convert import by name to import by number i Interleave headers a Realign sections x Optimise for WinXP -d Use decompressor from specified file -v Be verbose Output format ~~~~~~~~~~~~~ Uncompressed file In uncompressed file mode, 20to4 simply does the specified optimisations and write out the resulting file uncompressed. CAB-Dropper In this mode, the input file is compressed into a standard cab file. This cab is then prepended with a batch file that decompresses the data and runs the extracted executable. If for some reason the default decompressor is to big for you, you can specify your own decompression batch using -d. The specified file is then used as a replacement for the internal batch decompressor. A sample batch is included in the package. The compression itself can be controlled using -w, usually -w0 compresses best. PE-Dropper This works pretty much the same way as CAB-Dropper mode except that the resulting file is a PE exe file. The included decompressor most likely runs only on XP and 2k. You can specify your own compressor, too, but since this mode is experimental i would not recommend that. if you need information on that anyway, use the email address above. Optimise PE structures ~~~~~~~~~~~~~~~~~~~~~~ If no additional optimisations are specified 20to4 does only do some basic things including clearing the section names, setting unneccessary header fields and the hint fields in the import by name structures to zero. Rebuild import table The import table is rebuilt by interleaving the hint fields of the import by name structures with the preceeding one. This will save some bytes and in conjunction with realigning sections can shrink the source data by a few 100 bytes. Convert import by name to import by number All name imports are converted into ordinal imports. The ordinals are taken from the system 20to4 is running on, so the resulting file will most likely run only on systems with the same windows version and the same updates installed. Interleave headers The dos and the pe header are interleaved, often allowing the first section to start earlier in the file. Realign sections This removes superfluous zeros at the end of each section. The windows exe loader initialises all sections to zero up to their virtual size anyway, so why store them. Optimise for WinXP Windows XP allows for some additional optimisations. The main one is that the .dll extension can be removed from the library names. Closing words ~~~~~~~~~~~~~ 20to4 should be quite stable now, but i cannot guarantee that it will work always as expected. If you bump into such a situation, please drop a line to error@20to4.net. If possible, include the file that caused the problem and give a short description of the behaviour that you consider to be an error. and now, go test it! marcus "muhmac" winter [attachment=0]20to4.rar[/attachment]
robinHood
hat folgende Dateien an diesen Beitrag angehängt
Aufgrund eingeschränkter Benutzerrechte werden nur die Namen der Dateianhänge angezeigt Jetzt anmelden! |
20to4.rar
antworten