![]() |
and really, you don't need to unpack a trainer, just breakpoint on writeprocessmemory / readprocessmemory in most cases gives you what you need, unless the trainer injects a dll, in which case usually virtualprotect gets you to the area (cos it has to change it to writable)... so all a packer gains in essence (at least to me) is a size change and very little else
|
Yeah, you can BP the WPM/RPM etc export rather than the import (which may well be unavailable due to the destroyed IAT), absolutely.
Quote:
|
One more thing pro any kind of compression: the ability to check for damages in the file. (Although the original question was not about this problem/solution...)
I really hate it when - thinking of computer-illiterate users who are hardly able to do more than click on buttons and icons - web pages show you for download naked EXE's, especially large ones. You download them, run them and will get mysterious error messages or seemingly unrelated problems if the file was damaged during download (or upload?!) and it doesn't explicitly check its own integrity. Pack it with an EXE compressor or archive it with ZIP, RAR etc. and you'll find out whether it's damaged or not. |
I never had problems with muping PECompact, but an oep dump with fixed iat of hax0rs latest trainers gives me a "Stream read error" message.
Patching that msg away dont help, i get an empty grey window then. Copying the overlay from original file and add it to the dump dont help, too. Whats so special about muping hax0rs trainers? |
It's something to do with the Cheat Engine feature on which they are based. It does a similar thing when you unpacked a standard UPX'ed CE trainer. But personally i'm not interested in unpacking, or in any other way, messing with other people's trainers. It never seems to end well whatever the intentions.
|
I never saw an upxed CE trainer, you know an example?
I just want to improve my MUPing skills. |
1 Attachment(s)
Attached.
|
| All times are GMT -7. The time now is 14:14. |
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
FileForums @ https://fileforums.com