Where can i find paper about unpacking Obsidium?

This isn't an easy Target (well never seen tutors )
look at:
stolen bytes on OEP
int3 check's
redirect api
SEH
CC check on API address
check cc after the API call in code
steal bytes on API start & jump to next line in API
jump to API with a ret (funny tricks with stack)

and so on
Hope this help you

[softworm]

I have one paper written in Chinese by my friend fly,
and wish to find something more detailed. It's said a cracker
named ZILOT wrote something interesting but i didn't find it.

Maybe I'll write one when i unpack the unpackMe. Somebody
said it's not difficult but it's hard to me.

Thank you!

hi softworm,
you may meet Zilot here :
w��w.woodmann.net/forum/showthread.php?t=4853
rheya