|
RL!dePacker v1.3 |
:: Tehnical info:
RL!dePacker
has a build in option to detect OEP. However this option does not work with VB
(always use FindOEP! function with VB applications and Force to manual OEP?) and
some packers. So if RL!dePacker can not unpack the file use FindOEP! function to detect correct
OEP, but use it only as a second resort since it can be jammed! Option Force OEP to manual address is used to force stopping on manual OEP
address, use this option ONLY if packer can not be unpacked (the target runs
instead of breaking at OEP or dumps at wrong OEP). Option Correct OEP to manual address is
used correct OEP in
PE header of the unpacked file. Option Hide
unpacker from detection is used hide debugger from being detected by antiTricks. Option
Use tracer to correct IAT
is used to remove all
known redirection types.
Generic unpacker can unpack ONLY packers that do not use IAT
redirection, that don’t steal APIs and which fill out IAT table in
correct order. All ordinals that can be converted to API names are converted,
others are inserted into IAT as ordinals! Currently MFC applications are
not supported due to the different .idata structure. Designed for NT systems, Windows 2000 or later but it
should work on Windows 9x
if you have psapi.dll file!
If you don’t want to update the software and therefore
wait few seconds before you can use this program delete Updater.dll file.
::
Can I report a bug or contact the autor?
Here is the contact information which you can use to
contact me:
Handle:
ap0x
WebSite: http://ap0x.jezgra.net
Email:
ap0x.rce(at)gmail(dot)(com)
:: RL!dePacker
is tested with 84+ packers:
|
|
UPX 0.8x - 2.x [use GenOEP to detect true OEP in |