Jump to content
Tuts 4 You

[Unpackme] ModdedFog v1.1


Recommended Posts

Posted

Hehe... it got solved fast again :P

Congrats guys...! :)

Seems to be i'm not good developing protectors haha :roll:

Posted (edited)

nice idea Sonny27... i started to code Imprec plugin to solve this...

nice unpackme, i realy liked it...

THX

EDIT:

here is my import fixing plugin for ImpRec...

my first plugin ever :D

If you want source, PM me... (code is ugly looking ;) )

ExeFog_v.1.1_ImpREc_Plugin.rar

Edited by donny
  • 1 month later...
  • 3 weeks later...
Posted (edited)

I unpacked it easily with ollyscript to fix IAT, but I still suck at finding IAT redirection code :(

Unpackme_.rar

Edited by SMK
Posted

@HMX0101

Very, very nice unpackme... i had truble tracing trough it... olly juct go crazy sometimes... nice trick

@-==Joker_Italy==...

thx, and thx for tut, it was nice to see it

@SMK

me too... couldn't find redirection, but i started learning masm few months a go, so i give it a try :D

it was fun coding

greets to all

  • 4 weeks later...
Posted

@HMX0101

Problem of your protector is that they are always the same or very similar. Try to create a rela protection, like obfuscation of OEP or an ahrder IAT with improved anti-debug anti-trace or something else. It will be more interesting for sure.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...