Thread: WinCE dll unpacking
View Single Post
  #3  
Old 01-20-2018, 05:16
leader leader is offline
Friend
  
Join Date: Oct 2017
Posts: 10
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 15
Thanks Rcvd at 3 Times in 2 Posts
leader Reputation: 0
Thumbs up
I just identified that the function above is NRV2E decription rutine.
It is used in UPX, so I think this windows ce dll is compressed with a modified UPX.

I made a little program to decompress code section using UCL library, now I need to rebuild import library....
Reply With Quote
The Following 2 Users Say Thank You to leader For This Useful Post:
niculaita (01-20-2018), tonyweb (01-21-2018)