The following comments are owned by whomever posted them. This site is not responsible for what they say.
Unpacking SafeCast 2.4
Authored by:
Human on
Wednesday, October 25 2006 @ 11:00 PM CEST
hi haggar why havent you used my experience with it? also you cant call it safecast(disc) due this will work with safecast only. adobe is app so safecasted. with safedisc you will encounter few more problems like:
1. script or olly will not reach oep due safedisc spawns ~e5*.exe that attaches to exe and debugs it, with olly it cant attach
2. you will not fix nanomites due it handles ~e5*.exe
3. you will encounter weak calls that are stolen opcode calls that shouldnt be never run, if you try to run any weak call all stolen opcode calls will be screwed
4. games from boonty.com have 2 versions of safecast, one is picture buttons play or buy this is normal safecast, other is dialogbox based play or buy and this one attaches to exe like safedisc and you cant debug it in olly. my unpacker uses resume/suspend method so it works, but i have to fix it for 2nd type
also its better to resolve all at once like my script does, or unpacker, you have script and unpacker sources over net, also now with my rebuildIAT.
cheers
1. script or olly will not reach oep due safedisc spawns ~e5*.exe that attaches to exe and debugs it, with olly it cant attach
2. you will not fix nanomites due it handles ~e5*.exe
3. you will encounter weak calls that are stolen opcode calls that shouldnt be never run, if you try to run any weak call all stolen opcode calls will be screwed
4. games from boonty.com have 2 versions of safecast, one is picture buttons play or buy this is normal safecast, other is dialogbox based play or buy and this one attaches to exe like safedisc and you cant debug it in olly. my unpacker uses resume/suspend method so it works, but i have to fix it for 2nd type
also its better to resolve all at once like my script does, or unpacker, you have script and unpacker sources over net, also now with my rebuildIAT.
cheers