Jump to content
Tuts 4 You

[unpackme] 2nd .net Unpackme


rendari

Recommended Posts

Thx, I will try :sweat:
bleh
I take that as a hint ? :ninja:

Heh, no not a hint. I just replaced the link to the old (buggy) unpackme with 'bleh' .

He won't let it slip through that easy again ^^

A tough nut :|

And I didn't add antidebug :D

Edited by rendari
Link to comment
Share on other sites

hook compileMethod function, log each method's ilcode.

virtual enum CorJitResult __stdcall

CILJit::compileMethod(class ICorJitInfo *,

struct CORINFO_METHOD_INFO *,

unsigned int,

unsigned char * *,

unsigned long *) proc near

The second parameter, a pointer to CORINFO_METHOD_INFO, is a structure as follows.

struct CORINFO_METHOD_INFO

{

CORINFO_METHOD_HANDLE ftn;

CORINFO_MODULE_HANDLE scope;

BYTE * ILCode;

unsigned ILCodeSize;

unsigned short maxStack;

unsigned short EHcount;

CorInfoOptions options;

CORINFO_SIG_INFO args;

CORINFO_SIG_INFO locals;

};

Link to comment
Share on other sites

Excellent. Any idea on how to hook method header reader in mscorwks.dll? Anyways, I'll write a solution for my own unpackme if you won't :) Yall just have to wait for it a bit; lots of stuff in school nowadays :(

Link to comment
Share on other sites

@rendari: it doesn't run on Vista. No jit-hook-packed-file can run on vista until now.

Edited by rongchaua
Link to comment
Share on other sites

try dnguard.

it runs on my vista pc

I have a Vista Business 64 Bit. And DNGuard Trial Version can not run on my machine. What do you have?

Link to comment
Share on other sites

try dnguard.

it runs on my vista pc

I have a Vista Business 64 Bit. And DNGuard Trial Version can not run on my machine. What do you have?

I have one normal winxp sp2 and DNGuard normal and trial crash on it =/

Link to comment
Share on other sites

  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...