Quote:
|
Originally Posted by MANtiCORE
so ... and what about several exe's and dll's? how it dump? ... I try to unpack Thinstall.exe and get only first .exe file  |
thinstall create virtual filestystem an hook some function such as CreateFile ReadFile ... you could BPX on it and dump ...