You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
hello. while trying other unpacker to compare with result with dumpwow, i noticed one weird thing.
most of game engine functions seems to be unpacked without errors, but seems like obfuscated or protected function's SEH chain doesn't seems to be appearing when i thrown binary to IDA. this is very hearthbreaking as blizzard games abuses SEH a lot to obfuscate such function's call analysis.
changeofpace's ow unpacker seems to be giving valid SEH infos when thrown into IDA, through his plugin only targets to be recovering IAT only, and actual unpacking is indeed handled by game itself.
not sure what am i missing here, may i ask for your insight related with this issue?
The text was updated successfully, but these errors were encountered:
hello. while trying other unpacker to compare with result with dumpwow, i noticed one weird thing.
most of game engine functions seems to be unpacked without errors, but seems like obfuscated or protected function's SEH chain doesn't seems to be appearing when i thrown binary to IDA. this is very hearthbreaking as blizzard games abuses SEH a lot to obfuscate such function's call analysis.
changeofpace's ow unpacker seems to be giving valid SEH infos when thrown into IDA, through his plugin only targets to be recovering IAT only, and actual unpacking is indeed handled by game itself.
not sure what am i missing here, may i ask for your insight related with this issue?
The text was updated successfully, but these errors were encountered: