|
I'm worried about my shitty english.
themida seems that not be *VERY* different from xprot
write a dll for helping, which attach the process and dump the image.
disasm it and find out the OEP,and I believe it's possbile:P
Hook the first extern call in any way, than we have a image which data section is not hurt badly, and...and IAT is a boring work. a superman , dragon, wrote a tools for them, but I don't know if it can still work.
is that all? No, SDK IS HADES ON UNPACKING, muhahaha...
I'm worried about my shitty english again.
|