Log in

View Full Version : FUU v0.1 Beta - [F]aster [U]niversal [U]npacker


NCR
May 2nd, 2010, 19:20
Hi there!,

This email is to let you know about a little tool i made some days ago. This first version is just a PoC (Proof of Concept) but i will do an update very soon with a lot of things more to make it a more interesting tool.

The idea of this tool born from my interest to test TitanEngine from ReversingLabs and see how it works and what kind of things can i do with it.

Anyways, here is the link: http://code.google.com/p/fuu/

Quote:

FUU (Faster Universal Unpacker) is a GUI Windows Tool with a set of tools (plugins) to help you to unpack, decompress and decrypt most of the programs packed, compressed or encrypted with the very well knowns software protection programs like UPX, ASPack, FSG, ACProtect, etc.

The GUI was designed using RadASM and MASM. Every plugin included in the official release was written in ASM using MASM.

The core of every plugin use TitanEngine SDK from ReversingLabs under the hood, this help to the developer to write plugins very easy and very fast without the need to worry about some repetitive and boring functions like dump, fix the iat, add sections, etc. You can develop a plugin for FUU in a very easy way using TitanEngine.

Also, FUU include some extra tools like:

* Generic OEP Finder
* Cryto Signature Detector
* Generic Unpacker
* Signatures Detector (next release)

Generic OEP Finder, Cryto Signature Detector and Generic Unpacker are from PEiD's team.


BR,
NCR

_genuine
May 2nd, 2010, 20:22
Hmm the embedded link doesnt work, could you provide the actual link?

NCR
May 2nd, 2010, 20:26
Quote:
[Originally Posted by _genuine;86385]Hmm the embedded link doesnt work, could you provide the actual link?


Hi!,

the link is: http://code.google.com/p/fuu

btw, you can download the first release here: http://fuu.googlecode.com/files/FUU%20v0.1%20Beta.rar

JMI
May 2nd, 2010, 20:36
We have implemented steps to prevent links from being "clickable" to material outside the Forums.

That's why you thought the "embedded link" didn't work. It works, it just is not "clickable."



Regards,

NCR
May 2nd, 2010, 20:38
haha, it nice to know that!

BoB
May 15th, 2010, 10:27
Hi NCR, thanks for the nice tool, and for giving credit to us at Team PEiD
_pusher_ said to me "I can't believe it uses unupx.dll, even I don't use it and I wrote it!"

Supporting the PE Explorer unpacker plugins would be a good improvement, as they are very well written and work statically.

BoB