lena151 Posted January 11, 2008 Posted January 11, 2008 After lARP v2.0 lite which was step-in level, here is an unpackme protected by lARP v2.0 Standard Ed. Dump and remove stub section. It would be great if you shared your remarks and the way how you did it by pm please. Don't hesitate to pm me for this one O, and the original unpackme doesn't run on win9x, hence the lARPed file doesn't either lena151. lARP_v2.0_Standard_Ed._UnpackMe.rar
Killboy Posted January 11, 2008 Posted January 11, 2008 Gonna give this a try Let's see what I'm able to pull of...
pavka Posted January 12, 2008 Posted January 12, 2008 (edited) script fix imp var addr var srh var voz var cp mov srh,401000 loop: find srh,#68????1500C3# cmp $RESULT,0 je quit mov voz,$RESULT mov cp,$RESULT+1 mov cp,[cp] mov srh,$RESULT MEMCPY voz,cp,6 jmp loop quit: ret Dump remove stub section Dumped_.rar lARP_v2.0_Standard_Ed._Unpacked.rar Edited January 12, 2008 by pavka
SunBeam Posted January 14, 2008 Posted January 14, 2008 (edited) Took me a bit, but I managed to go at it as well. I believe Lena's under the "microscope" again, fixing what's been discovered Cheers Edited January 14, 2008 by sunbeam
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now