[exelist] Discussion on DOS executable protection systems

["Stefan Esser" <anakin__@...>]

Sorry Mr. Gabler,

unfourtunately I must correct you. Generic unpacking of PE files is
impossible. Programs like ProcDump are nice, but there is much more to
rebuild a PE in comparison to a DOS Executable. You need much more then the
entrypoint to defeat the protection. Just an example: all known (released
and kept private) Import Rebuilders are still not able to recreate PE's that
were Protected with PE-SHiELD -API. Of course removing of PE-SHiELD is
possible, but to make it generic on future protections is nearly impossible.
PE-SHiELD is one year old... Developing of unpackers went forward during the
time... But although i did not release anything in my mind i collected a lot
of evil ideas.... Ideas that can't be reconstructed if you dont combine the
Power of IDA, PROCDUMP, SICE and some future AI Systems....

Yours sincerelly,
ANAKiN