Poll: Could you decompile the exe?
Yes, I've even got the password.
Yes, but can't find the password.
WTF?! It can't be decompiled (by me).
I didn't even try cuz' it's too easy.
I didn't even try cuz' I can't.
[Show Results]
Note: This is a public poll, other users will be able to see what you voted for.
Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[CHALLANGE] AutoIT DecompileME
11-02-2012, 06:16 PM
Post: #11
RE: [CHALLANGE] AutoIT DecompileME
hello , can I know how did you pack this ?
Find all posts by this user
Quote this message in a reply
12-10-2012, 09:23 AM
Post: #12
RE: [CHALLANGE] AutoIT DecompileME
(11-02-2012 06:16 PM)thmaster100 Wrote:  hello , can I know how did you pack this ?

I didn't really unpack it - in the sense of rebuilding the import table and the executable code'.
I dumped it from memory and then compared/analyse the data against normal autoit-exe to get the changes to Decompiler need to access the scriptdata.
Find all posts by this user
Quote this message in a reply
12-22-2012, 09:36 PM
Post: #13
RE: [CHALLANGE] AutoIT DecompileME
(12-10-2012 09:23 AM)cw2k Wrote:  
(11-02-2012 06:16 PM)thmaster100 Wrote:  hello , can I know how did you pack this ?

I didn't really unpack it - in the sense of rebuilding the import table and the executable code'.
I dumped it from memory and then compared/analyse the data against normal autoit-exe to get the changes to Decompiler need to access the scriptdata.

this sounds interesting , did you dump it using olly , or just bin called memory dumper
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication