Jump to content
Tuts 4 You

[unpackme] by HSN.C3r


HSN.C3r

Recommended Posts

features:

-packer section is obfuscated

-"code" section is protected

-No OEP obfuscate

-imports redirected

-compatible with Win XP sp2,sp3 .(may not work on vista and win7)

level: medium ----- (please vote)

unpackme.rar

Edited by HSN.C3r
Link to comment

level: 0

script

var pntwr

var iatst

var iatend

var fp

var fn

var oep

mov pntwr,5695E8

mov iatst,00451118

mov iatend,004516D4

mov oep,pntwr+3D

bphws pntwr, "x"

bphws oep, "x"

loop:

erun

cmp eip,pntwr

jne oepfind

mov fn,[esp+1C]

cmp [iatst],ebx

jne zoend

mov [iatst],fn

add iatst,4

jmp loop

zoend:

cmp iatst,iatend

jg oepfind

cmp [iatst],0

jne oepfind

add iatst,4

mov [iatst],fn

add iatst,4

jmp loop

oepfind:

pause

sti

mov oep,[eip+2D]

mov eip,oep

MSG "Oep Faund import fixed"

ret


/>http://rapidshare.com/files/352784852/unpackmeU_.rar

Edited by pavka
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...