Hi guys,

Its really quiet around here lately and I was wondering if anyone had some ideas for a new project?

I was thinking it might be interesting to have an introduction to the PE format and an example of basic unpacking. Of course, we would need the advice of an advanced reverser to guide the selection of the target.

Also, there is more room for work on function disabled targets, keyfiles, CRC checks, and like topics...All ideas are welcome though

Cheers,
Clandestiny

I think a keyfile protection is great. There arent many tuts on this subject. Im going to search for a target and post it here. any ideas?

KoKaInE

Hey guys what about Unpacking project!!


NeO

Hello,
I think unpacking is usefull to have some knowledge about, to understand anything about it you have to grasp the PE structure first, I suggest reading the manually unpacking project (MiZ) at +Sandman's old forum will point you in right direction.

meRlin

I was think what we wouldn't start on Upx but Pecrypt 1.02!Not so easy and fun!!


NeO

Hi NeO'X'QuiCk,
I think as its a newbie project, if it is going to be an unpacking project then it should
probably be fairly easy. As for PeCrypt 1.2, I have'nt yet found a target packed with it. Did you have a particular target in mind?.

regards

And what about a project on some CrackMe?

Where is it meRlin!


NeO

hz there for we would make it more easy!I was thinking like this That we pack the notepad.exe everyone has it!SO we would have all the start advantage!And there is a little help with Latingo unpacking PeCrypt 1.02!
The problem was to get the program back to the orignal and explaon how you did it!Easy but not Easy!

What do you think??

Hi guys,

I don't know if you checked out www.discompress.com by my alter-ego Vince

I attempted to create a simple tuts guide for most of the packers/protectors. Well I lost interest in September last year - time/wife problems

But the site is still there and I still have more tuts on
unpacking notepad.exe and other targets after packing it with several packers available to upload.

I also had a great idea of publishing the known 'signature' bytes of these packers so attempting to make it easier to find that elusive OEiP that causes so much hassle for beginners. If anyone thanks me enough I'll rev up the notebook and do a few more tuts to include rebuilding the IAT and IT (oops, Import Address Table and Import Table for the API's) with +Tsehps Revirgin ! and explain what the hell are RVA, RAW etc and what other tools to use............

hOrn_dOg

It a good idea!There should be more like you because there are only a few but not complete site for learning to unpack!Etern Bliss(4),R!sc,yates...

I will write to you !!

Neo

Hi hOrn-dOg,

Checked your discompress. Good work. Keep going. Yes, I'll send you one thousand thank yous for more.

Regards, Kugi

Hi,
Yeah I will throw in a couple of thanks A
site specialising in unpacking, I like it, keep
it up.
regards

Hi Guys, thanks for the support.

I'll show the wife the messages and hopefully she will let me play with my PC at weekends again

BTW
I have requested that the site be hosted at safer
place as well. So those P off Mafia 'commercial protectors' programmers can't shut it down

Plus any suggestions re the discompress site are welcome

hOrny

Horny do you have a email!!


NeO

I meant hOrn_dOg!!Sorry!!

NeO