PEiD Signature Organizer 1.3 alpha 5 October 6, 2007
Posted by reversengineering in OTHER, TOOLS.add a comment
+ More filtered import
+ Autocleanup button
LINK:
ACKiller 0.31 pre-release October 6, 2007
Posted by reversengineering in TOOLS, UNPACKERS.add a comment
ACKiller = unpacker for Acprotect ,Ultraprotect
ACKiller 0.31 pre-release
- Signatures added: 1.06, 1.20, 1.22c, 1.30, 1.3b,
- Deleted bug of processing CR in version 1.30
- Added ability to continue unpacking if bad CR found (protector’s bug!)
- Improved determination of ACProtect’ed files
- Determination of library by the flag in headers (not by extention)
LINK:
http://rapidshare.com/files/60726105/ACKiller_0.31_pre_release_.rar
Unpacker ExeCryptor 2.x.x. beta 1 October 6, 2007
Posted by reversengineering in TOOLS, UNPACKERS.add a comment
HI
nice tool
link:
http://rapidshare.com/files/60725225/Unpacker_ExeCryptor_2.x.x._beta_1.rar
NEW OLLY ICE October 6, 2007
Posted by reversengineering in NEWS.add a comment
NEW OLLY ICE ADDED.
FAST LINK!
NEWS October 6, 2007
Posted by reversengineering in NEWS.add a comment
NEW OLLY DBGS ADDED .
NEW PERSIAN BOOK ADDED.
DeFixed Edition v2 October 6, 2007
Posted by reversengineering in DEBUGGER, TOOLS.1 comment so far
HI
This version of OllyDbg is moded to be undetectable by protectors or
protecting formulas, it is fast and with most needed plugins for
everyday cracking! A few fixes where done, some where reported by the
users thanks to them some changes in code for hidding and of course
speed is as always even or better……DLL loader was added since
first version hadn’t one, added plugins and updated osme old version
with newer ones….. Most important to note i add a new plugin
manager to this package that works on DeFixed only now instead of
deleting your plugins you can easly choose which to disable and which
to use and return them back too without any problem !!
LINK:
Quick Unpack v2.0 final October 6, 2007
Posted by reversengineering in TOOLS, UNPACKERS.1 comment so far
hi
for starting
History of the versions
———————–
v2.0 final
[!] fixed many bugs like missed import functions
[!] fixed several driver bugs like the one which didn’t allow to pass some exceptions
[!] improved export feature now supports invalid functions
[!] many improvements (like 256×256 icon for Vista, thanks to Feuerrader
) and optimizations (like better memory handling)
[!] now Force.dll doesn’t use GenOEP.dll, though some code was borrowed
[+] added so long-waited ability to use scripts. before using scripts it’s strongly recommended to read the manual (Scripts.eng.txt file). script examples may be taken from Scripts folder (*.lua files), scripting language LUA manual also can be found there (LUA Manual.html), which parser was embedded in the program. BTW I know that Step button doesn’t work like a charm but I wasn’t able to make it better
[+] passing parameters to the application added
[+] import list from imprec feature added (now Quick Unpack supports both export and import of import functions in imprec-compatible files this allows to edit some functions or add new ones. keep in mind this option works with normally created files but if you put some garbage or format this file in unusual manner this may cause crash
I was too lazy to parse the file with care)
[+] attach process feature added (this option allows to choose any module in a process for unpacking and has some features. if in processes listbox a process name is a full path with name you can attach to this process. if it is only name of the file you don’t have enough rights to attach. you can’t specify the OEP, the instruction the program was stopped is treated as the OEP. to use attach process feature one should load the program in any debugger and manually get to the OEP, when attach to that process with Quick Unpack. keep in mind that for smart import recovery you don’t need the program to run, it can just be left in the debugger standing at the breakpoint. but to use smart import recovery with tracer you should put it in the infinite loop (EB FE) and run the program because the tracer uses current thread for tracing. if the program was put in the infinite loop don’t forget to restore these two bytes in the dump. when attached tracing import is unreliable and very slow, so it’s not recommended to use it). this feature allows to use Quick Unpack as a dumper and import recoverer (my attempt to replace PETools and ImpRec with one program
)
[+] imprec plugin support added (this feature allows to use imprec tracer plugins in Quick Unpack to restore import functions. keep in mind when using attach to process feature the program must be run for the tracer to work)
[+] added UsAr’s generic OEP finder. I modified it a bit
[+] added Human’s generic OEP finder. I modified it a bit
[+] added deroko’s generic OEP finder. I modified if a bit and took the GUI from Human’s generic OEP finder. it’s sometimes slow but rather powerful and be warned that this finder uses driver and the driver is unloadable till next reboot. uses deroko’s Dream of every reverser engine so incompatible with win2k3 and kaspersky. for more information about this engine [-] no more old non-generic OEP finders