首页
社区
课程
招聘
[ZT]Unsafecast 1.0 by Human
发表于: 2006-9-7 11:37 2778

[ZT]Unsafecast 1.0 by Human

2006-9-7 11:37
2778
FROM:EXETOOLS

well this suppose to be safedisc 2.70 unpacker, thats why its not Debug only suspend process dumper/fixer.
due safedisc attaches itself to process and we cant debug it in olly
and with softice somehow it crashes.

but for safedisc i failed with 2 things:
1. weak calls aka false stolen calls, if we try to rebuild one of those then all true call are screwed, well we can overcome it by 2 runs, on 1st make table of fake calls and not resolve it
2.nanomites int3 sgdt and others. but those are resolved by safedisc process so havent figured yet how to overcome this in ring3

so i moded it little to unpack safecast.
what it does?
well all that does script, but not 1 minute but few miliseconds(power of asm vs power of script:P)
also unsafecast is self learning, alone finds oep,safecast sections,iatstart, callfix addr,iatfix 2 addresses.
and size of iat by checking import table and how many dll's are there, then counting in iat all zero ends of
every dll.

i tested it on cubology,sweetopia and aqua bubble all new games.
and works like a charm.
open exe with it press play and you will have messagebox with oep, put that in imprec and rebuild iat of already dumped and fixed exe(no my own import rebuilder yet, but some day will be)

sorry but no sources this time.

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

上传的附件:
收藏
免费 1
支持
分享
最新回复 (1)
雪    币: 817
活跃值: (1927)
能力值: ( LV12,RANK:2670 )
在线值:
发帖
回帖
粉丝
2
sustian
2006-9-7 18:31
0
游客
登录 | 注册 方可回帖
返回
//