Protection ID v0.6.3.5 Public DECEMBER 2009

protectionid

Protection ID v6.3.5 – 2009.12.24
hello folks!

we are proud to present you the next and most up2date version of protection id.

it was about time to bring this to the public, as the last version was released back in march.

during development of this version we ported it over to MASM v10,

using the latest compiler & linker available at the moment.

this version of pid features highly optimized scanning routines, resulting in very fast detections smile

i.e. a 2 GB setup.exe in processed in less then 1 second (smart mode kicks in).

we tweaked nearly all scans to benefit from our new procs.

Continue Reading

MEW 11 1.2 -> NorthFox/HCC 脱壳脚本

//////////////////////////////////////////////////
//  FileName    :  MEW 11 V1.0-V1.2.osc
//  Comment     :  MEW 11 V1.0-V1.2 OEP Find
//  Environment :  WinXP SP2,OllyDbg V1.10,OllyScript V0.92
//  Author      :  fly
//  WebSite     :  http://www.unpack.cn
//  Date        :  2005-10-03 20:30
//////////////////////////////////////////////////
#log

MSGYN "Plz Clear All BreakPoints  And  Set Debugging Option Ignore All Excepions Options  !"
cmp $RESULT, 0
je TryAgain

//GameStart――――――――――――――――――――――――――――――――

sti
find eip, #C30000#
cmp $RESULT, 0
je NoFind
eob Break
bp $RESULT
log $RESULT

esto
GoOn:
esto

Break:
cmp eip,$RESULT
jne GoOn
bc $RESULT
sto

//GameOver――――――――――――――――――――――――――――――――

log eip
cmt eip, "This is the OEP! Found By: fly"
MSG "Just : OEP !  Dump and Fix IAT.  Good Luck  "
ret

NoFind:
MSG "Error! Maybe It's not MEW 11 V1.0-V1.2 ! "
ret

TryAgain:
MSG " Please  Try  Again   !   "
ret