Fravia's TOOLS OF OUR TRADE Messageboard ~ Moderated
Re: Re: Re: New exe-packer - help needed
Friday, 15-Jan-99 22:08:55
> will ship with incoming 1.3.0 (soon ;)
yeah.. i'm ur (u & stone) fan :)
u've done a great job as usual.. the script for ASPack (very good compression imho) works perfectly, and now i've understood my mistakes.. i've left ignore faults = on..
this is the my first time with neolite pe-packer so i donno how it works in the previous verz:
stepping into the loader code i've found that it swaps the stub code into an allocated buffer and then call FlushInstructionCache before passing the control to this new stub (adjusting the ret addr onto the stack).. unpack the exe, and than jump back in the real entry point with the 50,FF,25 sequence.. but since the bp is set at startup if i leave ignore=on when the execution reachs the same byte in the buffer procdump will not trigger this brk and the progz will die.. i've worked ALWAYS with ignore=on and this the reason for the length of my script: it simply try to follow the execution path until it reachs the final jmp.. poor man i am :(
Tnx again,
kill3xx
kill3xx