Flag: Tornado! Hurricane!

Error: Authentication required to access requested resource.


Packer Name Packer Author Classification Analysis By Last Updated
NsPacK v3.7 North Star (LiuXingPing) Compressor saphex January 10 2008
Allocation Anti-Debug Anti-Disassembly Section Name Sample
PE header no no [configurable, default = .nsp] N/A
Notes
Nothing special, just a simple compressor.

Transfer Command
00000000 61                 popa
00000001 9D                 popf
00000002 E9 ?? ?? ?? ??     jmp     value
Entry Point Signature
00000000 9C                 pushf
00000001 60                 pusha
00000002 E8 00 00 00 00     call    00000003
00000007 5D                 pop     ebp
00000008 83 ED 07           sub     ebp, 7
0000000B 8D ?? ?? ?? ?? ??  lea     ecx, [ebp-value]
00000011 80 39 01           cmp     byte ptr [ecx], 1
00000014 0F 84 ?? ?? ?? ??  jz      value
Known Unpackers
A easy way to uncompress NsPack using OllyDbg.

At entry point, add a breakpoint in the pusha instruction and
run the application. After it breaks, follow the ESP register
value in dump, add a hardware breakpoint with 4 bytes length
in the first bytes. Then run the application again. When it
breaks, the EIP will be at the transfer command.
Just single step it and EIP will be at the original entry point.

There are 16,512 total registered users.


Recently Created Topics
wsnpoem audio.dll
Mar/09
suggestions - RE tra...
Mar/09
Requesting Suggestio...
Mar/06
Force enable debug p...
Mar/05
upgrading new image ...
Mar/03
upgrading new image ...
Mar/03
upgrading new image ...
Mar/03
Can some one give me...
Mar/02
Error in generating ...
Feb/28
Problem debuggin Dir...
Feb/28


Recent Forum Posts
suggestions - RE tra...
RolfRolles
wsnpoem audio.dll
debbie
Requesting Suggestio...
secursig
Requesting Suggestio...
phn1x
how to get executabl...
RabidCi...
how to get executabl...
RabidCi...
Force enable debug p...
Silkut
Can some one give me...
wildinto
Problem debuggin Dir...
Silkut
IDA Pro plug-in &quo...
cseagle


Recent Blog Entries
RolfRolles
Mar/08
Compiler Optimizations for ...

ReWolf
Mar/04
When memory management goes...

thesprawler
Feb/20
log1949.txt -- Wondering ho...

thesprawler
Feb/20
log1949.log -- created on C...

thesprawler
Feb/17
Trying to reverse the firmw...

More ...


Recent Blog Comments
bughoho on:
Mar/09
Compiler Optimizations for ...

cliffwolf on:
Mar/08
Compiler Optimizations for ...

Orr on:
Mar/08
When memory management goes...

GynvaelColdwind on:
Mar/07
When memory management goes...

petroleum on:
Mar/06
When memory management goes...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit