|
|
| Посл.отвђт | Сообщенiе |
|
|
Дата: Дек 27, 2003 12:12:26 I am writing a upx unpacker,I heared from sbody that volodya released an special upx edtion can unpack any "wraped" upx packed exe, I want know is that tools set break point on GetProcAddress and search neast POPAD and stop at OEP, then try fix the import table, my tools use the mothods but most times import table can't be restore fully. or else it can unpack import table directly by some way?could UCL can? thx. |
|
|
Дата: Дек 27, 2003 12:55:03 Oh I found it at all tools list. |
|
|
Дата: Дек 27, 2003 17:53:20 azsd It's not suitable for "any" UPX file, only some of them. It was meant as an educational complement for volodya's article about packers. BTW, you'll need my plugin for PE Tools in order to use that version of UPX. So, don't expect too much :-) |
|
|
Дата: Дек 28, 2003 08:54:19 In my test it unpack most exe,and the unpacked file are much cleaner than manual dump. It fails when unpack upxshit 0.66 thx your nice works. |
|
|
Дата: Дек 29, 2003 00:36:03 azsd Thx 4 testing! BTW, where can I find the so-called upxshit? |
|
|
Дата: Дек 29, 2003 06:28:11 · Поправил: azsd Sorry, Ft....I mistaked the 0.06 to 0.66. I make a pic for the test result. here the uploaded is. 543932207__upUPX.gif
![]() |
|
|
Дата: Дек 29, 2003 18:55:53 Outstanding job, azsd! Thank you very much!!! HidePX is another UPX scrambler made by Feuerrader (you can download it from the tools section). We'll check that Stripper 2.03 and UPXShit 0.06 for the next release. |
|
|
Дата: Дек 29, 2003 19:17:36 Quantum UPXShit 0.06 - cryptor, not scrambler. |
|
|
Дата: Дек 30, 2003 06:14:15 Asterix I see... Thx! |
|
Powered by miniBB 1.6 © 2001-2002
Время загрузки страницы (сек.): 0.068 |