Jump to content
Tuts 4 You
Sign in to follow this  
CDW

Mew 11se 1.2/pecompact 2.x Unpackers With Masm-source

Recommended Posts

CDW

My first and i think last attempt to "writing my own unpacker". I wanted to learn something about PE format and ImportTable so i wrote this two "unpackers". I do not think the sources/solutions are very smart, so dont expect too much ;) .

Mew unpacker: for MEW 11 SE v1.2 packed executables

h**p://cdw.de.vu/MEWunpacker.zip

Un2Pec: tested with PECompact 2.55/2.64/78/79

written for 2.79 only (but it seems to work with older versions of PECompact)

tested linkers/compilers: VB5/6,MSVC++6/7, lcc32,

MASM/TASM, Borland Delphi 5/7.

tested PECompact plugins: most of the packer plugins (retail version) and the anti-debug/api-redirection/GetProcAddress emulation plugins.

Would not work with EAD-"protected" executables (EAD: some cusom "exchanged antidebug plugin" which users can by for $400+), because i didnt found any targets - and i would not write some extracode for this curiosity ;) .

h**p://cdw.de.vu/Un2Pec.zip

Edited by CDW (see edit history)

Share this post


Link to post
Killboy

Didnt have a look at the sources, but unless you use heavy debug stuff to watch and direct the module, it should work...

Dunno what it achieves, actually, but it should work as well...

I assume there are only some additional Olly SICE detection tricks

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×
×
  • Create New...