Hello, you wrote: [...] AB> but now, ExOM fool all the three unpacker! maked agains it: AB> UN_EXOM1 by RedDragon/UG2000 (is it now UG2001 ? :D ) AB> EXOM_EXE.TR Script by MANtiC0RE (thankx 4 bug report :) AB> UNEXOM by Valmii^tKD (:p) [...] so ... here is unpackers ... for both .exe and .com files ... TR's scripts. i very lazy to write it on assembler ... to Aziz B: under WinNT and Win2000 all drx registers is virtualized and code like your: 660FA0 PUSH FS 660FA1 POP FS 66B80000FFFF MOV EAX,FFFF0000 6633C9 XOR ECX,ECX 0F23F8 MOV DR7,EAX 0F21FB MOV EBX,DR7 0F23F9 MOV DR7,ECX 663BD8 CMP EBX,EAX 7502 JNE next_ CD20 INT 20 next_: do not work correctly ... fix it :-) but ... anyway my unpacker remove protection sucessfully on any windows/dos systems :) -- Best regards, MANtiCORE, aka Valery Shabaev mailto:manticore@... -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 5.5.3i for non-commercial use <http://www.pgpi.com> mQENAzhVgCgAAAEIANKjKo9KDmJPlhmrKr+ACwk8sJhTOAC3d5xEk2JxlSxpha70 Q3jYW6PnirOvmFMHG9rKP/EATwy4wZFMjHHwYM3t9vRVccl2zW/NgvToin7BfoG6 9NADSTWPo164h2GZOoD5QpGHZ25e/SCOK1xs9OFjVG04YH86Yjg1uAdRzHNPL7tt Q/1BUaw1voWvV5EF6C4BkqjcRk9WNceBKtq/+FXVQ7qqSfqn/h4MlrErXE56azmf C2ty64/OpFgBcuMry9rhUL//Xw9PP/1/9fzYTxgzULzATl4nNzz4O5ndQQ8XvsA8 klECQyJnp4Vwd9Xv5PJ5JwN8lqpnVINGc8bPPVMABRG0Hk1BTnRpQ09SRSA8bWFu dGljb3JlQG1haWwuY29tPokBFQMFEDhVgChUg0Zzxs89UwEBbDMH/08Ra/b2fBZ0 rMPzuQt+onZh/52Ci8Cw7xa228ReIZFpyaVRSdGJPzbCX4JhTSFzqoJ2wgYvGagx umg3zuPtHYP/vzGMMO4QtM9c8zrOkxqAVgMTI2PRMhAhKsFtirsHf8ezb5TBhfcQ Ix1SBtx+c9MzSh3LoolX8DsYwu0j/oRsGY6pVLL52sd1KitaHwQ8xL5hf8zLHbwn nI8Pk6/Cu8h6pS7z4FKh6gR4HSA6JTbtlDGhLpMQTkXB9fgt11sWZLRpW8C9VQDp N3IW5SsF/rJbk8XdBme+OYxUxz41SW6SFOywPEydVGeY3leFOMky6MRo13Ht5/ij yQneHgzy5pI= =7k63 -----END PGP PUBLIC KEY BLOCK-----
Attachment:
exom_com.tr
Description: Binary data
Attachment:
EXOM_EXE.TR
Description: Binary data