-
-
[ZT]SecuROM v7.xx Cleaner
-
发表于: 2005-12-15 17:13 2735
-
转自: CRACKL@B
In v5 and v7, SecuROM incorporates a sofisticated code obfuscator engine. It
is better than any obfuscation I have seen elsewhere, so the simple pattern
matching of macros do not work very well (at all).
This tool cleans code that was protected/obfuscated with SecuROM's
code obfuscator. While this tool handles a LOT of things, it is not perfect,
so don't expect to be able to run files that were cleaned with it. The purpose
of this tool is to simplify a reverse-engineering/security analysis
of those binaries.
Full source code is included (GPL for the files with my name in the header).
This tool only supports PE images. Since starting with some version,
the securom .text section is compressed, just use LordPE to dump the
entire process (dump full) to disk at the point where the .init section
jumps (via a RET) to the real securom entrypoint in .text.
附件:b189_srom7_cleaner_v1.0.zip
In v5 and v7, SecuROM incorporates a sofisticated code obfuscator engine. It
is better than any obfuscation I have seen elsewhere, so the simple pattern
matching of macros do not work very well (at all).
This tool cleans code that was protected/obfuscated with SecuROM's
code obfuscator. While this tool handles a LOT of things, it is not perfect,
so don't expect to be able to run files that were cleaned with it. The purpose
of this tool is to simplify a reverse-engineering/security analysis
of those binaries.
Full source code is included (GPL for the files with my name in the header).
This tool only supports PE images. Since starting with some version,
the securom .text section is compressed, just use LordPE to dump the
entire process (dump full) to disk at the point where the .init section
jumps (via a RET) to the real securom entrypoint in .text.
附件:b189_srom7_cleaner_v1.0.zip
赞赏
他的文章
看原图
赞赏
雪币:
留言: