Jump to content
Tuts 4 You

[UnpackMe] - iChallengeYou UnpackMe #2


iChallengeYou

Recommended Posts

iChallengeYou

Damn, that is really fast SmilingWolf! Seems you won the gold medal :)


 


So how did you do this so fast? Did you traced all the code, or did you used api's to find the oep?


Link to comment

- Break on system breakpoint


- MEMBP on execution on the first .aspack section


- Unpack AsPack


- When I see all the ugly code i chicken out and put a MEMBP on execution on the .text section


- run, reach the OEP, dump, fix the imports


- Be a good housewife and do the cleanings


 


Done! :)


Edited by SmilingWolf
  • Like 3
Link to comment

Damn, that is really fast SmilingWolf! Seems you won the gold medal :)

 

So how did you do this so fast? Did you traced all the code, or did you used api's to find the oep?

Easy enough.

OEP is clear and easy to find.

Imports clear.

Just kill the TLS after unpack.

dump_IF.7z

  • Like 1
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...