首页
社区
课程
招聘
[下载]Unpetite 0.2b by mirz
发表于: 2007-1-30 13:41 3618

[下载]Unpetite 0.2b by mirz

2007-1-30 13:41
3618
From:ATReam


Unpacker for Petite 2.1 and 2.2 coded by mirz :).

What's new in version 0.2b:

- I corrected verification of signature ( now it should work fine :) )
; ? = 2 bajty
;[PEtite v2.1=B8????6A?68????64FF35????648925????669C6050]
;[PEtite v2.2=B8????68????64FF35????648925????669C6050]
- I corrected reconstruction of import symbols ( Now it rebuilds such functions as LeaveCriticalSection etc. )
- unpack dll :)
- new dialog box :)
- manifest.xml is from MSDN library.

I tested him on several programs packed by me.

How unpetite 0.2b work:
(files *.exe)
1. run program
2. It stops on access violation
3. then it searches jump to OEP
4. rebuild import symblos
5. dump and save file as unpacked.exe

(files *.dll)
1. ntdll.KiUserException is patched
2. loading of dll
3. It stops on access violation
4. then it searches jump to OEP and reconstruction of ntdll.KiUserException
5. rebuild import symblos
6. dump and save file as unpacked.dll

All notes, problems and errors send under address e-mail mirz@o2.pl .
Don't forget, that program can have some errors else:)

Some programs, which was using for tests:

- xmplay (thx bart)
- Cruehead Crackme1
- hexedit Geoffrey Prewett
- Lit 1.21 Marek Szyku翅
- RegCleaner4.3 by Juoni Vuorio
- CloneCD 5.2.6.1
- Winamp 5.08d
- WinIso v5.3
- WinRar 3.4

[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)

上传的附件:
收藏
免费 1
支持
分享
最新回复 (3)
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
tnx 4 sharing
2007-1-30 13:54
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
谢谢分享!辛苦了!
2007-6-11 20:04
0
雪    币: 2575
活跃值: (502)
能力值: ( LV2,RANK:85 )
在线值:
发帖
回帖
粉丝
4
linhanshi是个好版主
2007-6-11 20:31
0
游客
登录 | 注册 方可回帖
返回
//