Azure Posted August 3, 2008 Share Posted August 3, 2008 (edited) My own packer... It's so easy... So, it's only a game... to relax yourself There're some anti-debugger in it .... I believe you can unpack it ... 001.rar Edited August 3, 2008 by Azure Link to comment Share on other sites More sharing options...
Sturgeon Posted August 3, 2008 Share Posted August 3, 2008 I don't look antidebug unpack.rar Link to comment Share on other sites More sharing options...
pavka Posted August 3, 2008 Share Posted August 3, 2008 my dumpdump.rar Link to comment Share on other sites More sharing options...
Azure Posted August 3, 2008 Author Share Posted August 3, 2008 (edited) Well, Good ~~ Congratulations you win the game... I don't look antidebug unpack.rar There're three anti-debugger in the file.... exactly, anti-Olly debugger... Edited August 3, 2008 by Azure Link to comment Share on other sites More sharing options...
aztecx Posted December 7, 2008 Share Posted December 7, 2008 http://rapidshare.com/files/171160874/dump.exe.htmlAfter stepping once just set hardware bp>onaccess>dword on first four bytes of ESP dump. Olly breaks just below the real OEP. Make new origin, dump debugged process and your done. Link to comment Share on other sites More sharing options...
Ox87k Posted December 8, 2008 Share Posted December 8, 2008 (edited) I guess it's only a false-positive 'coz my Nod32 popup with the red screen! Anyway, good job and remember to try to improve it! Edited December 8, 2008 by Ox87k Link to comment Share on other sites More sharing options...
by:70 Posted December 8, 2008 Share Posted December 8, 2008 (edited) unpack.rar unpack.rar Edited December 8, 2008 by by:70 Link to comment Share on other sites More sharing options...
Sp1d3rZ Posted December 8, 2008 Share Posted December 8, 2008 here is dumped.rar Link to comment Share on other sites More sharing options...
Gushe Posted December 8, 2008 Share Posted December 8, 2008 Well, one of the anti-debugs is OutputDebugStrinA, that's for sure. I guess 401000 is OEP? Although ImpRec doesn't seem to be finding any imports. This was some random testing using unmodified Olly. Tomorrow I'm going to try find all the 3 anti-debugs. Just because I also like to learn do things manually. And I am still a noobie Link to comment Share on other sites More sharing options...
Glenntot Posted December 9, 2008 Share Posted December 9, 2008 didn't find anti-debug.. hope i dumped it right....i inserted the video...unpacked.rar Link to comment Share on other sites More sharing options...
Gushe Posted December 9, 2008 Share Posted December 9, 2008 My unmodden Olly with no plugins enables keeps in Crashing though. Lots of acces violations errors, some single step events and loads of other exceptions seem to occur. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now