![]() |
|
#28
|
|||
|
|||
|
hehe
![]() would be nice to see that file (I still cannot download though )anyway, I think this "decrypting" and "dumping" approach won't lead you anywhere. there must be a table, based on which the morpher engine selects instruction(s) to replace the current one with, so the proper technique involves writing a 100% tracer routine and access to that table. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| EXECryptor | omega_red | General Discussion | 12 | 11-02-2005 08:34 |