Flag: Tornado! Hurricane!

OpenRCE Packer Database >> WinUpack v0.39

Packer Name Packer Author Classification Analysis By Last Updated
WinUpack v0.39 Dwing Compressor saphex January 10 2008
Allocation Anti-Debug Anti-Disassembly Section Name Sample
PE header no no PS______, _xQ, [blank] N/A
Notes
Simple compressor, can strip relocs and export table. After restoring the import table trough GetProcAddress and LoadLibraryA, it does a return with the oep in the stack.

Transfer Command
00000000 85 C0              test    eax, eax
00000002 74 1F              jz      short 00000023
00000004 ; ...

0000001C 50                 push    eax
0000001D 53                 push    ebx
0000001E FF D5              call    ebp
00000020 AB                 stosd
00000021 EB ??              jmp     short value
00000023 C3                 retn
Entry Point Signature
00000000 BE ?? ?? ?? ??     mov     esi, value
00000004 AD                 lodsb
00000005 AD 50              push    eax
00000007 FF 76 34           push    dword ptr [esi+34h]
0000000A EB ??              jmp     short value
Known Unpackers

There are 30,635 total registered users.


Recently Created Topics
Keep you Slim Easily
Apr/19
Your Best Slim &...
Apr/19
Amazing Your Lucky Skin
Apr/18
Your Skin Very Soft...
Apr/17
Question about debbu...
Apr/16
IDA PRO Struct Point...
Apr/15
problems with pseudo...
Apr/04
Problem with ollydbg
Mar/22
Should binaries be n...
Mar/22
Ida pro on infineon ...
Mar/10


Recent Forum Posts
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin
Pydbg load() issue
phreak
Pydbg load() issue
netw0rm
How would you interp...
mbin
Pydbg load() issue
phreak


Recent Blog Entries
loisjoneis
Apr/19
Detox Max Review - amazing ...

martanhawkings
Apr/19
iPhone 4S- Purchase Apple’s...

elenablacik
Apr/18
Cleanse Pure Premium Supple...

hermesfrsac
Apr/17
Il convient que vous devrie...

oleavr
Apr/17
frida.re 1.2.0 is out, with...

More ...


Recent Blog Comments
pedram on:
Dec/21
frida.github.io: scriptable...

cin100dy on:
Dec/16
Devil May Cry Cosplay Costu...

NeOXQuiCk on:
Nov/26
DONGLE

maharlee on:
Nov/21
Cheap Nike Shoes NZ,Nike Sh...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit