Jump to content
Tuts 4 You

UnPackMe

The creation of new topics is disabled in these subforum categories.

Please create and post your new challenges in the appropriate subcategory of Downloads > Challenge of Reverse Engineering

A topic will then automagically be created and posted in these forums...

427 topics in this forum

  1. fReestYler

    Themida v3.1.4 (x32 & x64) - Impossible

    by fReestYler

    View File Themida v3.1.4 (x32 & x64) - Impossible Two files are protected with an old version Themida (3.1.4) Entry Point is virtualized Just find and restore OEP, recover the IAT and unpack if it possible Virustotal detects it as a virus, but my AV software is not Submitter fReestYler Submitted 05/11/2025 Category UnPackMe  

    fReestYler
    Last reply by fReestYler,
  2. lovejoy226

    Themida & VMProtect (Same Virtualized Code Sections)

    by lovejoy226

    View File Themida & VMProtect (Same Virtualized Code Sections) I want you guys who are capable of unvirtualizing and unpacking them to upload the final ones. These files are just the same part of the codes virtualized which are 2 lines of the original mfc source codes. So if you can unvirtualize them and unpack them, please upload the final ones. Any other protections are excluded absolutely. Give it a try and improve your skills. Best Regards. sean. Submitter lovejoy226 Submitted 04/08/2025 …

    lovejoy226
    Last reply by lovejoy226,
    • Like
  3. C5Hackr

    Eclipse Runtime Obfuscator

    by C5Hackr

    View File Eclipse Runtime Obfuscator Hey everyone, I’m sharing an UnpackMe challenge that combines VMProtect packing with runtime function obfuscation using Eclipse Runtime Obfuscator. This should be an interesting challenge for those who enjoy working with dynamic obfuscation and anti-debugging techniques. Protection Details: VMProtect is used for basic packing, with import protection and anti-debug enabled. Eclipse Runtime Obfuscator dynamically obfuscates function execution, making dumped analysis and debugging difficult. Function code is relocated to a new memory region at runtime and accessed through vecto…

    C5Hackr
    Last reply by C5Hackr,
    • Confused
    • Thanks
    • Like
  4. lovejoy226

    Themida x32 v3.1.8.0

    by lovejoy226

    View File Themida x32 v3.1.8.0 The Entry Point is virtualized. 2 Parts of the codes are also virtualized. [Your Mission] Just unpack this file and make it run well without any errors or termination. No devirtualiztion are necessary. Submitter New Year - New Mind Submitted 02/12/2025 Category UnPackMe  

    lovejoy226
    Last reply by lovejoy226,
    • Thanks
    • Like
  5. lengyue

    The Enigma Protector v7.70 (x32 & x64) 1 2

    by lengyue

    View File The Enigma Protector v7.70 (x32 & x64) This is an example program I used to shell The Enigma 7.7. You can shell it, bypass it, PatchHWID, KeyGen to make it run normally. Of course, it would be best if the shell could be peeled off.Have fun! https://workupload.com/file/EGgppWamMA6 Cracked: Submitter lengyue Submitted 11/24/2024 Category UnPackMe  

    TRISTAN Pro
    Last reply by TRISTAN Pro,
    • Confused
    • Haha
    • Thanks
    • Like
  6. Fatmike

    Fatmike's Crackme #5

    by Fatmike

    View File Fatmike's Crackme #5 ..::[FaTmiKE 2o24]::.. Welcome to my 5th crackme! It took a long time implementing this, i hope it is hard to solve! Sorry for the long load time of the crackme Here are the goals: 1. The main goal is to unpack and uncrypt this crackme. 2. Find a valid serial or write a keygen. If you only succeed in 1. or 2. it's fine, i am happy to read every solution. (e.g. if you can find a valid serial without unpacking, please write a tutorial how you did it!) The crackme was tested o…

    Fatmike
    Last reply by Fatmike,
    • Confused
    • Thanks
    • Like
  7. boot

    ASProtect SKE 2.56 SDK Sample (x32)

    by boot

    View File ASProtect SKE 2.56 SDK Sample (x32) Coded by boot / Tuts4you, ASProtect SKE 2.56 | UnPackMe x86 32-bit Medium Protections + SDK September 16, 2024 If you unpack it write a tutorial... ------------------------ HWID: FBFFC7AD-5EF5 USER: boot SN: YHRQ6C-WVDZ3-4X673-R6QSB-S7PBF-C52DP-WYDXK-RWJAB-2ZXJR-B4MY9-G5VUQ Submitter boot Submitted 09/16/2024 Category UnPackMe  

    boot
    Last reply by boot,
    • Haha
    • Thanks
    • Like
  8. kuazi GA

    Safengine NetLicensor v2.3.7.0

    by kuazi GA

    View File Safengine NetLicensor v2.3.7.0 Based on Safengine Licensor with the combination of: Safengine Code Protection (Mutation & Virtualization) Safengine Licensor Local License Verification All protection options enabled: Anti Debug Anti Trace Anti Virtualization Anti Attach Anti Dump Anti API Hooks Self Integrity Check Code & Data Encryption Metamorphic Code Generation Branch Obfuscation Code Mutation Code Virtualization Advanced Code Replace Import Elimination API Relocation Try to unpack it. Enjoy! ; ) …

    jackyjask
    Last reply by jackyjask,
    • Like
  9. lengyue

    The Enigma Protector v7.60 (x32 & x64)

    by lengyue

    View File The Enigma Protector v7.60 (x32 & x64) Example of Shell Addition for Enigma 7.60. This is a different example from the past, interested friends please challenge. Unpack, cracking or Patch HWID. Use your means to make it work correctly. TheEnigma_7.6_x32&x64Example_protected.rar Submitter lengyue Submitted 08/28/2024 Category UnPackMe  

    azufo
    Last reply by azufo,
    • Thanks
    • Like
  10. CodeExplorer

    Obsidium v1.6.9

    by CodeExplorer

    View File Obsidium v1.6.9 This is just one of my program protected The objective is unpack it. Submitter CodeExplorer Submitted 08/09/2024 Category UnPackMe  

    kikako
    Last reply by kikako,
    • Haha
    • Like
  11. lovejoy226

    The Enigma Protector x64 v7.4 (HWID Lock) 1 2

    by lovejoy226

    View File The Enigma Protector x64 v7.4 (HWID Lock) Two simple Win x64 GUI applications protected using Enigma x64 v7.4. Challenge is to; bypass the hardware ID lock; unpack the application. Let us go together to solve this issue. Submitter The Binary Expert Submitted 06/17/2024 Category UnPackMe  

    Priboi
    Last reply by Priboi,
    • Confused
    • Haha
    • Thanks
    • Like
  12. lovejoy226

    Safengine Licensor v2.4 (HWID Lock)

    by lovejoy226

    View File Safengine Licensor v2.4 (HWID Lock) I coded a simple Win x64 GUI application with a close button and protected it using Safengine Shielden v2.4. Challenge is to; bypass the hardware ID lock; unpack the application. Let us go together to solve this issue. Submitter The Binary Expert Submitted 06/11/2024 Category UnPackMe  

    POOP COME
    Last reply by POOP COME,
    • Thanks
    • Like
  13. lengyue

    The Enigma Protector v7.50 (x32 & x64 DEMO)

    by lengyue

    View File The Enigma Protector v7.50 (x32 & x64 DEMO) This is an encryption example using The Enigma Protector 7.50 encryption. Enigma 7.5_x64_DEMO.rar TEP_7.5x32_DEMO.rar Submitter lengyue Submitted 04/29/2024 Category UnPackMe  

    Revers_Engineer
    Last reply by Revers_Engineer,
    • Haha
    • Like
  14. lengyue

    Enigma Protector v7.5（Shell 示例） 1 2 3 4 5

    by lengyue

    This is an Enigma Protector_7.5 shell sample, whether it is Unpack, PatchHWID, or KeyGen, as long as it can successfully bypass registration, it is sufficient. Welcome friends to test, Using hardware ID encryption without popping up a registration box when changing computers, I think this one machine, one code solution is very challenging，I don't check anti virtual machine, but it cannot run on a virtual machine, which I find somewhat unbelievable..thank you. Insufficient forum member permissions, unable to post to the reverse challenge area. Sorry Name: tuts4you HWID: C16BF-8E2CA-FF15D-2CE16 KEY: BA23FLLESM75MTHXKU3Z8JNA3VJWLKCSZWV3PS76NAMJK5D3MRQ5ZYJ5ZPE9EKA…

    lovejoy226
    Last reply by lovejoy226,
    • Sad
    • Haha
    • Thanks
    • Like
  15. kuazi GA

    Safengine Licensor v2.3.4

    by kuazi GA
    • 0 replies
    • 2.8k views

    View File Safengine Licensor v2.3.4 过程式编程语言，所以IAT和资源很少 Safengine License 2.3.4 with medium protection options enabled. Program is written in assembly language so there are very few IAT and resources. Submitter kuazi GA Submitted 11/12/2023 Category UnPackMe  

    kuazi GA
    Last reply by kuazi GA,
  16. boot

    The Enigma Protector x64 v7.40 (Demo Version | All Protection Options)

    by boot

    View File The Enigma Protector x64 v7.40 (Demo Version | All Protection Options) Unpackme x64 - Enigma Protector 7.40 (Demo Version | All Protection Options) Enigma x64 + SDK +HWID Lock + etc... https://forum.tuts4you.com/ If you unpack it, please make tutorial(s)... I will mark the answers with tutorials as a solution. The compressed package includes a simple MP4 display, please pay attention to check... Created by boot / From Tuts4you 2023.08.21 Submitter boot Submitted 08/21/2023 …

    ahmedpetrol
    Last reply by ahmedpetrol,
    • Haha
    • Thanks
    • Like
  17. boot

    VMProtect x86 v3.81 (Default Protection Options)

    by boot

    View File VMProtect x86 v3.81 (Default Protection Options) Please debug/unpack in the virtual machine This target is protected by a specially modified version of VMP, with some simple protection measures added It only supports running on x64 operating systems, such as Win7 x64 or Win10 x64, which may also support most Win11 x64 If you unpack it, please make tutorial(s)... I will mark the answers with tutorial(s) as solution. Submitter boot Submitted 07/27/2023 Category UnPac…

    X0rby
    Last reply by X0rby,
  18. boot

    VMProtect x64 v3.6 HWID Lock (All Protection Options) 1 2

    by boot

    View File VMProtect x64 v3.6 HWID Lock (All Protection Options) Unpackme x64 - VMProtect 3.6 HWID License (All Protection Options) VMP x64 SDK + HWID Lock +etc... WwW.Tuts4you.CoM https://forum.tuts4you.com/ If you can unpack it, please make a tutorial... I will mark the answers with tutorials as a solution. The compressed package includes a simple MP4 display, please pay attention to check... Created by boot / From Tuts4you 2023.06.21 Submitter boot Submitted 06/21/2023 Category …

    Gugabf
    Last reply by Gugabf,
    • Confused
    • Haha
    • Thanks
    • Like
  19. boot

    Armadillo x64 v9.64 (General/Default Protection Options)

    by boot

    View File Armadillo x64 v9.64 (General/Default Protection Options) Unpackme - Armadillo x64 v9.64 | WwW.Tuts4You.CoM General/Default Protection Options = HWID Lock + etc... If you can unpack it, please make a tutorial... The compressed package includes a simple MP4 display, please pay attention to check... HWID:87DF-0E78 NAME:boot KEY:000016-M9KY7Y-1PM436-8JKH7H-G8QXCH-3ACEGN-Y5ND6B-TY4VJ2-5FX1WY-WGJBFB After seeing the dynamic screen, please click the LEFT MOUSE button to exit OR press the "ESC" button once to exit. Created by boot / From Tuts4you 2023.06.19 Submitter …

    X0rby
    Last reply by X0rby,
    • Sad
    • Like
  20. Fatmike

    Fatmike's Crackme #4

    by Fatmike
    • 2 replies
    • 7.3k views

    View File Fatmike's Crackme #4 ..::[FaTmiKE 2o23]::.. After a little break i decided to program another little crackme (This is my 4th crackme). Here are the rules: 1. The main goal is to unpack this crackme or write a loader. 2. If you like, find a valid serial or write a keygen. The crackme was tested on windows 10. Have fun! Submitter Fatmike Submitted 06/08/2023 Category UnPackMe  

    jackyjask
    Last reply by jackyjask,
    • Haha
    • Like
  21. boot

    Obsidium v1.69b1 x86 (All Protection Options)

    by boot

    View File Obsidium v1.69b1 x86 (All Protection Options) Obsidium v1.6.9.b1 x86 = All Protection Options = HWID lock + etc. This unpackme (VB6.0) is created by me. If you can unpack it, please make a tutorial... 2023.06.07 Submitter boot Submitted 06/07/2023 Category UnPackMe  

    TRISTAN Pro
    Last reply by TRISTAN Pro,
    • Like
  22. X0rby

    VMProtect v3.8.1 Ultra (Mutation + Virtualization)

    by X0rby

    View File VMProtect v3.8.1 Ultra (Mutation + Virtualization) The target is an old software (from 2010) coded in c++, I just apply the VMP protection without any special code as I show in the two screenshots. All available protection features in VMProtect were used with this unpackme. Refer to the attached images for the specific protection settings used. Challenge is to unpack the file, providing an explanation and details on your methodology. Submitter X0rby Submitted 04/17/2023 Category UnP…

    sasadz
    Last reply by sasadz,
    • Confused
    • Haha
    • Thanks
    • Like
  23. boot

    WinLicense v3.1.3.0 x86 (All Protection Options) 1 2 3 4 5

    by boot

    View File WinLicense v3.1.3.0 x86 (All Protection Options) UnpackMe - WinLicense 3.1.3.0 x86 Full Protect HWID Lock + Entry Point Virtualization + Etc... HWID: 1111-2222-3333-4444-5555-6666-7777-8888 Author:boot From:Tuts4you Time:2023.04.02 Submitter boot Submitted 04/02/2023 Category UnPackMe  

    InvizCustos
    Last reply by InvizCustos,
    • Haha
    • Thanks
    • Like
  24. CodeExplorer

    Themida x32 v3.0.4.0 1 2

    by CodeExplorer

    View File Themida x32 v3.0.4.0 One of my tool (CompareInfo v3) protected by Themida x32 v3.0.4.0. Submitter CodeExplorer Submitted 04/01/2023 Category UnPackMe  

    lovejoy226
    Last reply by lovejoy226,
    • Haha
    • Thanks
    • Like
  25. lovejoy226

    PELock DialogBox

    by lovejoy226

    View File PELock DialogBox It's a PELock'ed file. Try to unpack it if you have time, if you are a skilled code reverser or the author, you maybe can do it. Thank you for your effort in advance. Submitter The Binary Expert Submitted 01/12/2022 Category UnPackMe  

    lovejoy226
    Last reply by lovejoy226,
    • Like
×
×
  • Create New...