[unpackme] New Challenge

[Mouradpr]

hi all...!!!

welcom a new challenge 2007(++++)

(1) unpackMe----> & get a valid name & serial

ok good luck for all

UnpackME.rar

[sdy100]

akzxyzazz1111

dcbcdefercc323

dumped.rar

[Mouradpr]

nnnnnnnnnnnnn

verry good :D:d:d:d (triple protect)

[Guest eta]

And in just 2 hours or something !

Cool !

[Ufo-Pu55y]

What 'triple protect'... ? ............

I dunno, how sdy100 went, but I say 'triple jump' ^^:

1) Olly attach to take a short sniff

2) WinHex to dump from 400000-405200

3) LordPE to take 3 mins for correcting/fixing

Clean dump:

Cleaned_Dump.rar

Greets

/EDIT

Regarding Name&Pass.. nothing new since ur last keygenme... so

Keep on

Edited July 24, 2007 by Ufo-Pu55y

[Guest nick_name]

could some1 pls tell me why do i always get this warning abt LOCK CMPXCHG8B 'n cant proceed anymore, it keeps looping around the same instruction ...

[Ufo-Pu55y]

could some1 pls tell me why do i always get this warning abt LOCK CMPXCHG8B 'n cant proceed anymore, it keeps looping around the same instruction ...

http://en.wikipedia.org/wiki/F00f

I'm not sure about this, coz I never saw it before.

I mean.. Olly gave me this warning, too.

I only once started this UnpackMe in Olly.. saw that message and better left that crap alone.

Then I simply attached to the running app.

Choose a BP like PointH or GetDlgItem and you're in.

But I would also like to hear, if this trick could really be dangerous.

If yes... I'll feel quite p!ssed... :X

[Mouradpr]

simple to unpack this challenge tnks to roben...

coded By MASM...protected by ExeCryptor 1.5.30 and Morphie and packed with winUpack...

unpacking without Ollydbg...

1 ) run challenge

2 ) open LordPE & correct ImageSize

3 ) full dump

4 ) run file dumped with "winhex "or "Hex Workshop" search for " MZ....this program...."

5 ) delet a code section before this phrase ---> save file

Good job

so.. scan the final file with PEiD --->ExeCryptor...ok

6 ) open the final file & open LordPE --> CorrectImageSize ---> full dump... bravo

all fine now...but the size of file ??? 40 kb (???????????)

7 ) Open File With LordPE (PE Editor) go to section and wipe lase section ---> save and ok.

8 ) Rebuild File...

Edited July 25, 2007 by Mouradpr

[Mouradpr]

tutorial attached..@+

special thnks to RobenHoodArab....

Tutoial.rar

[Ufo-Pu55y]

tutorial attached..@+

special thnks to RobenHoodArab....

Thx, but why that unnecessary steps with LordPE and WinHex ?

Or was it just meant for demonstrating something ?

[Mouradpr]

Thx, but why that unnecessary steps with LordPE and WinHex ?

Or was it just meant for demonstrating something ?

I do not know how to show you ... but merely draw Successional ...

:D:d