CDW Posted September 27, 2006 Posted September 27, 2006 (edited) My first and i think last attempt to "writing my own unpacker". I wanted to learn something about PE format and ImportTable so i wrote this two "unpackers". I do not think the sources/solutions are very smart, so dont expect too much . Mew unpacker: for MEW 11 SE v1.2 packed executables h**p://cdw.de.vu/MEWunpacker.zip Un2Pec: tested with PECompact 2.55/2.64/78/79 written for 2.79 only (but it seems to work with older versions of PECompact) tested linkers/compilers: VB5/6,MSVC++6/7, lcc32, MASM/TASM, Borland Delphi 5/7. tested PECompact plugins: most of the packer plugins (retail version) and the anti-debug/api-redirection/GetProcAddress emulation plugins. Would not work with EAD-"protected" executables (EAD: some cusom "exchanged antidebug plugin" which users can by for $400+), because i didnt found any targets - and i would not write some extracode for this curiosity . h**p://cdw.de.vu/Un2Pec.zip Edited September 27, 2006 by CDW
Killboy Posted September 28, 2006 Posted September 28, 2006 Didnt have a look at the sources, but unless you use heavy debug stuff to watch and direct the module, it should work...Dunno what it achieves, actually, but it should work as well...I assume there are only some additional Olly SICE detection tricks
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now