![]() |
|
|
|
#1
|
|||
|
|||
|
Dont be so sure, there are new versions every now and then.
![]() And yes, bp on execution is great....except when there are like 90 functions! And no idea how to execute some of them! |
|
#2
|
||||
|
||||
|
Well if you have located them just change eip to pushad/push eax... decrypt code and dump it =)
I've used hiew to scan for pattern in optimik and just redirected eip to those addreses, dumped them with ice-ext and fixed dump or event better would be to code debug loader if there is more then 20 crypted code places and automate process of eip redirection/code dumping. cheers |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| svkp | infern0 | General Discussion | 3 | 06-05-2011 18:34 |
| SVKP 1.3x unpacking | codeX | General Discussion | 10 | 01-28-2005 22:03 |
| The new svkp 143 | britedream | General Discussion | 3 | 09-19-2004 22:22 |