Originally Posted by AVGN
dave uses themida
i used a different packer....didn't d/c Originally Posted by AVGN
i used a different packer....didn't d/c[Diuscussion] protect your program
Originally Posted by AVGN
i used a different packer....didn't d/cThemida is a God Packer...
Themida use to be a good packer, but latest ollydebug scripts unpacks this in seconds...
Also you have to remember what a packers is, it compress's the code for portability right... but once its executed the full size and original code is still in memory, which if memory scanning detection is used will still detect the same thing, Themida uses stolen bytes along with many other methods to avoid ripping which makes this more of a protector like VMProtect, which creates a fake environment to execute the code(very similar to google chrome) the down fall is it requires much more memory as opposed to NOT packing/protecting the exe, so while you have a smaller exe on disk it will occupie a lot more memory space. instead of packing/protecting why dont you research some anti debug methods if you that concerned about people ripping your addresses.
Also you have to remember what a packers is, it compress's the code for portability right... but once its executed the full size and original code is still in memory, which if memory scanning detection is used will still detect the same thing, Themida uses stolen bytes along with many other methods to avoid ripping which makes this more of a protector like VMProtect, which creates a fake environment to execute the code(very similar to google chrome) the down fall is it requires much more memory as opposed to NOT packing/protecting the exe, so while you have a smaller exe on disk it will occupie a lot more memory space. instead of packing/protecting why dont you research some anti debug methods if you that concerned about people ripping your addresses.
@Departure
can you help me? I tried using PESpin but I got this error
[!] Error: Invalid PE32+ File
I have the x64 version on my x64 bit os
can you help me? I tried using PESpin but I got this error
[!] Error: Invalid PE32+ File
I have the x64 version on my x64 bit os
Why would you pack public code anyways?
Originally Posted by PashaAmd
@Departure
can you help me? I tried using PESpin but I got this error
[!] Error: Invalid PE32+ File
I have the x64 version on my x64 bit os
can you help me? I tried using PESpin but I got this error
[!] Error: Invalid PE32+ File
I have the x64 version on my x64 bit os
Guys honestly you don't need a packer to make your shit undetected, packers are only good for files on disk not getting detected but the same bytes are unpacked into memory as the original so for memory detection a packer wont do shit, this is also know as "Runtime Detection" there are many other custom things you can do to make your shit undetected and stay undetected for along time(depending on how well spread your hack is). I will make a topic soon explaining some ideas you can use to get your shit undetected without any use of a packer.. OR double packing which made me laugh..
remember that one kid that hex edited it and tried to pass it off as his own? made me mad.
Hex edit ? lol
Encrypt all strings
Encrypt all strings
i hate xor.... );
Make the code impossible to read.
Originally Posted by supercarz1991
Why pack it when its unpackable too? Someone who is.determined enough will find a way...its a computer, everything can be reveresed
that's all problem.
if u really want to protect the hack you'll need to know alot of knwoledge at ASM or something.
Originally Posted by Decoder back
well ,use methods for encrypt your source code , but almost packers sucks..
that's all problem.
if u really want to protect the hack you'll need to know alot of knwoledge at ASM or something.
that's all problem.
if u really want to protect the hack you'll need to know alot of knwoledge at ASM or something.