Jump to content
Tuts 4 You

[unpackme] 2nd .net Unpackme


rendari

Recommended Posts

Thx, I will try :sweat:
bleh
I take that as a hint ? :ninja:

Heh, no not a hint. I just replaced the link to the old (buggy) unpackme with 'bleh' .

He won't let it slip through that easy again ^^

A tough nut :|

And I didn't add antidebug :D

Edited by rendari
Link to comment

hook compileMethod function, log each method's ilcode.

virtual enum CorJitResult __stdcall

CILJit::compileMethod(class ICorJitInfo *,

struct CORINFO_METHOD_INFO *,

unsigned int,

unsigned char * *,

unsigned long *) proc near

The second parameter, a pointer to CORINFO_METHOD_INFO, is a structure as follows.

struct CORINFO_METHOD_INFO

{

CORINFO_METHOD_HANDLE ftn;

CORINFO_MODULE_HANDLE scope;

BYTE * ILCode;

unsigned ILCodeSize;

unsigned short maxStack;

unsigned short EHcount;

CorInfoOptions options;

CORINFO_SIG_INFO args;

CORINFO_SIG_INFO locals;

};

Link to comment

Excellent. Any idea on how to hook method header reader in mscorwks.dll? Anyways, I'll write a solution for my own unpackme if you won't :) Yall just have to wait for it a bit; lots of stuff in school nowadays :(

Link to comment
try dnguard.

it runs on my vista pc

I have a Vista Business 64 Bit. And DNGuard Trial Version can not run on my machine. What do you have?

I have one normal winxp sp2 and DNGuard normal and trial crash on it =/

Link to comment
  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...