unpacking custom packers

[abhijit mohanta]

http://dreamofareverseengineer.blogspot.com/2011/10/unpacking-custom-packers.html

[Zekim]

Cool

Your blog reminds me a very good friend of mine

Mike.X.

[dn5]

Will read it in a moment. Thanks for posting.

[cozofdeath]

It is decent and I've seen what your talking about many times but it is usually in the less complex packers like you said. Even ASProtect is much more advanced and creates many many heaps with VirtualAlloc so it becomes a pain if you think you can just bp VirtualAlloc and run and get near OEP because normally it won't work. Also not all of them have the api loop or it is implemented differently. Seems like a good start to your blog.

Edited October 14, 2011 by cozofdeath

[chickenbutt]

UPX over xor loops mostly..

[icr]

Worth reading.. Thanks