Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Featured Replies

It not Packer :) It is bad clone Daemon Crypt

100ххххх E8 AE000000 CALL <JMP.&kernel32.WriteProcessMemory>

100ххххх 8B47 34 MOV EAX,DWORD PTR DS:[EDI+34]

100ххххх 0347 28 ADD EAX,DWORD PTR DS:[EDI+28] ; <----OEP <--Dump it

100ххххх A3 04310010 MOV DWORD PTR DS:[10003104],EAX

Everytime I dump it, the code section seems destroyed :/

Is there some sort of CRC of the file that decrypts the code section ?

Ive found OEP and dumped after SetThreadContext, but yeh, the code section is crap :o

@Killboy

In LordPe dump Partial & Rebuild Pe : options Validate Pe, Status Window ^)

Small script :)

var p

var p1

var sz

var rgn

mov p1,eip

mov p,eip

add p,60

mov [p],#EB#

add p,8E

bp p

run

bc p

mov sz,eax

sto

mov rgn,eax

add p1,3F9

bp p1

run

bc p1

dm rgn, sz, "D:\CrackTools\Protector\PPP\PPP\dump.exe" // edit fo you

Msg "File Unpacked!"

ret

  • 4 weeks later...
Everytime I dump it, the code section seems destroyed :/

Is there some sort of CRC of the file that decrypts the code section ?

Ive found OEP and dumped after SetThreadContext, but yeh, the code section is crap :o

dump after ResumeThread ,and after you patch the new process. when you dump, dump with LoadPE (dump Full) and make sure

you remove the option in LordPE

dump full: paste header from disk

then fix the patched dump and you'll have a working file, you can use the same method used in unpacking Open Source Code Crypter 1.0 the tutorial here

azmo

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.