|
rdf20
I did previous version, lots of dump checks, write to api address, one of these procs decrypted at runtime, checks ep in pe-header etc. I didn't use stripper so don't know how well it works but looks like still a bit of work after using stripper.
regards
|