View Single Post
  #29  
Old 05-10-2004, 21:57
bedrock's Avatar
bedrock bedrock is offline
Friend
 
Join Date: May 2002
Posts: 96
Rept. Given: 8
Rept. Rcvd 5 Times in 2 Posts
Thanks Given: 20
Thanks Rcvd at 2 Times in 2 Posts
bedrock Reputation: 5
@SvensK,

exe32pack is easy to unpack, but Louis made some silent updates to defeat my unpacker, i wrote that just cause SmartFTP client used to be packed, but now author is not packing anymore

But i want to lear aspr

Maybe i look at Raiden for you

EDIT:

Ok, i just looked at raidenftpd, unpacking is striaght forward, but it seems raiden exe has lots of anti debug tricks, including IsDebuggerPresent and int 2F, after running unpacked exe inside olly i keep ending upu at

Code:
hxxp://www.raidenftpd.com/en/pirate.htm


To unpack exe32pack with softice:

Load exe in SI, and set bpm esp-4 rw, on second break step down a couple of lines and you will be at jmp eax, where eax = OEP, dump here and fix IAT with Imprec... done
--
bedrock

Last edited by bedrock; 05-10-2004 at 22:44.
Reply With Quote