Friday, February 10, 2006

iceunp 的由來

iceunp 的由來

dos 時代有很多壓縮可執行檔的工具程式,早期比較有名的如法國的lzexe與美國的pklite,

當時還在大學唸書的我,有一次在email 收到一個屬名 "Prince Of Sadness ",他希望我用他的ICE/COS引擎寫一個dos可執行檔的解壓縮(脫殼)工具,(奇怪的是他怎麼會找到我? 又怎麼知道我寫得出來?為什麼不自己寫呢?@@)

懶懶的我就

拿法國Frank Zago的IUP作為使用者介面的外殼(IUP的引擎是使用x86的int1作為trace工具,並不同於軟體模擬的ICE/COS引擎),

加上ICE/COS引擎,以及一部份德國teu的exedump function完成了iceunp,

也在trace 引擎內加入一些 [保護加殼工具] 的偵測及破解程序

後來不再maintain 就把source 公開了

--分隔線--以下是google 找到的Prince Of Sadness [Immortal Riot/Genesis]. --

http://www.google.com.tw/search?sourceid=navclient&ie=UTF-8&rls=GGLD,GGLD:2005-14,GGLD:en&q=Prince+Of+Sadness+%5BImmortal+Riot%2FGenesis%5D

Methyl 'Tunneling Document #4 (Development of Emulation Systems ...
... and how emulation technology used in AV software will cope with it and other
virus technologies. Looks like this is going to be another interesting year of
documents. Prince Of Sadness [Immortal Riot/Genesis]. [Back to index] ...
vx.netlux.org/lib/vme01.html - 155k - 頁庫存檔 - 類似網頁

Tutorials - Development of Emulation Systems
ICE and COS are (c) 1997 PRINCE of SADNESS and may be modified as long as the
base code of the modified system is acknowledged, and the copyright status of
said base system be stated. ICE and COS may be used, as long as the copyright ...
65.98.58.155/lib/static/vdat/tuss0004.htm - 161k - 補充資料 - 頁庫存檔 - 類似網頁

--分隔線--以下是google 找到的iceunp ------------------------------------------------------

http://www.google.com.tw/search?hl=zh-TW&rls=GGLD%2CGGLD%3A2005-14%2CGGLD%3Aen&q=iceunp&meta=

INSIDER - FAQ Edition #3 UNComplete by Christoph Gabler Release ...
... hlt lamer db " Only lamers do it this way.$" ÖÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ· º Cheap
IceUnp detection º º by Christoph Gabler º ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ ¯¯ IceUnp
uses good trace modes but the coder forgot one really dumb thing : His ...
fravia.2113.ch/protec/insi_faq.txt - 39k - 補充資料 - 頁庫存檔 - 類似網頁

ICEUNP--檔案管理--加密/解密--eNet中文軟體免費下載站

ICEUNP,免費軟體,download.enet.com.cn/html/070532000072721.html - 49k - 2006年2月8日 - 頁庫存檔 - 類似網頁

INSIDER - FAQ Edition #3 UNComplete by Christoph Gabler Release ...
Get a REAL IceUnp detection in the UNcovered version of INSIDER.FAQ ! ¯¯ mov
ah,4Eh ; Find the first match lea ... Iceunp/TR can be kicked with modification.
Mostly incompatible with QEMM. CR2 = Should not be modified, crashs on Cyrix. ...
www.searchlores.org/protec/insi_faq.txt - 41k - 頁庫存檔 - 類似網頁

Aaron's hOMEpAGE
... by Hendrix 52KB CUP386 v3.4 nice generic unpacker 50KB iCEuNP v0.3.4 - exe/com unpacker,
by JauMing Tseng 36KB IceUnp v0.3.3 asm source included, by JauMing Tseng 43KB IceUnp
v0.3.0 exe-unpacker by the author of xPack 11KB IceUnp v0.1.5 14KB ...
exetools.com/old-page/decrypt.htm - 45k - 補充資料 - 頁庫存檔 - 類似網頁

INSIDER - FAQ Edition #3 UNComplete by Christoph Gabler Release ...
get a real IceUnp Detection in The uncovered version of INSIDER.FAQ ! ¯¯ mov
ah,4Eh ; find The first match lea ... IceUnp/TR can be kicked with modification.
mostly incompatible with QEMM. CR2 = should not be modified, crashs on Cyrix. ...
www.tor.at/resources/computer/net/internet/ www/search/www.searchlores.org/protec/insi_faq.txt - 41k - 補充資料 - 頁庫存檔 - 類似網頁

CookieCrK
... DeGlucker 0.4, asm, 97,5 KB, Debugger dla DOS z kodem źródłowym w asm. iCEuNP
0.3.4, asm, 129 KB, Intel Complex Emulator exe/com UNPacker (freeware) kod źródłowy...
(iCEuNP, Kevin Executable file kit, X-pack for Executable ). TDHack 1.42, asm ...
62.233.216.194/index.php?show=sources - 38k - 補充資料 - 頁庫存檔 - 類似網頁

шшшшшщ шшш шъъш шъъш чщ ш чш шээш ш ш чщ ш ш ш ш шъъъ чщ ш ш ш ш ш ...
Even more Anti Iceunp code added. - Anti TR 2.02 - 2.05 added. - Improved entrypoint
emulation added. ... B0 Ш CUP386 3.4 Ш IceUnp 0.2.9 Ш AUP386 1.0 Ш IUP 0.6.4 Ш
UNP (-T) Ш XO (-C) Ш TR 2.05 Ш SoftIce Ш WinIce Ш Deglucker 0.04rc Ш ...
web.textfiles.com/software/trap.txt - 13k - 頁庫存檔 - 類似網頁

EddyHawk's Info List --- Executable Processor Review (ProsInfo) ...
... lab = laboratory min = minimum max = maximum mbr = master boot record mem = memory
mte = MuTation Engine orig = original ovl = overlay PIC = Programmable Interrupt
Controllers PIQ = Prefetch Instruction Queue PM = protected mode popunpak = ...
web.textfiles.com/computers/EDDYHAWK/prosinfo.txt - 101k - 補充資料 - 頁庫存檔 - 類似網頁
[ web.textfiles.com 的其它相關資訊 ]

VienenBox BBS
... I030.RAR, 9k, 12/11/98, IceUnP v0.3.0 - EXE/COM UnPacker by author of Xpack.
I031.RAR, 9k, 06/26/99, IceUnP v0.3.1 - EXE/COM UnPacker by author of Xpack.
I033.RAR, 36k, 11/08/99, IceUnP v0.3.3 - EXE/COM UnPacker by author of Xpack. I034. ...
www.vienenbox.de/filebase/TGMPACK.DOS/index.htm - 101k - 補充資料 - 頁庫存檔 - 類似網頁

SAC
1. i034.zip, IceUnP v0.3.4 - EXE/COM UnPacker by author of Xpack, 133154, 2000-01-14
00:00:00. 2. i5comp21.rar, I5comp v2.01 - Install Shield Cabinet Files Maintenance
Util, 97067, 1999-12-02 00:00:00 ...
www.sac.sk/files.php?d=7&l=I - 9k - 頁庫存檔 - 類似網頁