Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Featured Replies

Posted

Here is a new unpackme protected with latest version of WinLicense (2.0.8.0).

I put maximum protection, and locked it to hardware, so it requires a keyfile to run (provided of course).

Goal is to unpack it, or also bypass of hardware lock (make program run on all machines) can be a good solution.

Good luck.

EvOlUtIoN

wl2080_unpackme.rar

  • Replies 80
  • Views 48.1k
  • Created
  • Last Reply

Top Posters In This Topic

Posted Images

2ezrcw1.jpg

D:

Btw LCF-AT should be happy as he can finally update his script :3 thanks Evo

Edited by Lithium

@Lithium:

Don't know from where your errors comes!

Your O.S. is Windows 98 ?

It gives me a different error:

errorw.png

Edited by CodeRipper

mine is Windows XP Home Edition,who uses window 98 nowdays.

  • Author

This time will be very very hard to make a script for searching isregistered dwords automatically...i suggest you to learn how to search them manually.

For the error, i don't know...maybe you don't have the libraries for vc++ 8 on your pc.

quesego can update his Winlicense Tut too enjoy reading it but nothing got into my mind :( I am interested why some reversers can change Themida VM To X86 and make the program back to pure unpacked o.o aka whole themida is stripped totally D:

i just see the file , and was terminated from start when used with olly

but changed THIS

006B16DF TO PUSH 0A81731A

006C138A TO PUSH 0A828F79

0071FE83 TO PUSH 0A88A991

0074C2AC ??

so stoped here 0074C2AC

it can be see 00403520=00403520 (ASCII "About")

00403528=00403528 (ASCII "Good JOB!")

:)

Edited by sfs

just seen the file , and it was terminated when I loaded it in olly

but I changed

006B16DF TO PUSH 0A81731A

AND 006C138A TO PUSH 0A828F79

and it stopped here 006F803F and 006E787E need more research to check about HWID code.

^ better english

Edited by Lithium

Errors complaining about some application configuration are mostly related to a missing C runtime (msvcrt). Download a package from Microsoft and it should work fine (just my guess, worked fine for me).

This time will be very very hard to make a script for searching isregistered dwords automatically...i suggest you to learn how to search them manually.

For the error, i don't know...maybe you don't have the libraries for vc++ 8 on your pc.

How to find is registered dwords ?

Thanks !

  • Author

You have to discover this by yourself, i can't solve it for you...

lol quosego usually beats me to these.... :P

hehe I got very little time, and finding the is_registered dwords is a lot more difficult now.. (Fully virtualized.)

Also they've got some new stuff.

Have mastered the dynamic antidump now, and am working on the unlinking of dll's that annoys my script.

(there's a shortcut but don't like that.. :) )

  • Author

Anyone wold be better than quosego here? :D

I'm running on 3 hours sleep now. But after a couple of hours of napping I might take up the gauntlet :)

Found the is_registered dwords. :)

passed the hw-id check.. now onto the otehr stuff. :)

EDIT:

Quite nice, there's a secondary check. Which makes sure the antidumps are never written.

Thusly crashing the app.

Edited by quosego

Found the is_registered dwords. :)

passed the hw-id check.. now onto the otehr stuff. :)

EDIT:

Quite nice, there's a secondary check. Which makes sure the antidumps are never written.

Thusly crashing the app.

so if the app is reg. will not have antidumps or

No the a registered app wil have working antidumps.

A bypassed hw-id app will crash the same way as an improperly dumped executable.

Nice. So bypassing HWID is now infinitely harder. I tried the Deathway technique, doesn't work. I don't know how to do your thing quosego so I'm stumped. Too lazy to research it any further since I never had HWID bypassing experience in the first place.

Edited by Loveless

  • Author

ask only things about unpackme plz.

Nice. So bypassing HWID is now infinitely harder. I tried the Deathway technique, doesn't work. I don't know how to do your thing quosego so I'm stumped. Too lazy to research it any further since I never had HWID bypassing experience in the first place.

XD, i thougth WL never will fix that :P , and yes, all is virtualized now, will try the next week :)

Thanks Deathway, much appreciated ^^

I had to move heaven and earth & dig more VM code than ever before but I got it. :)

Unpack now is easy..

Sorry to say guys but my methods will stay private, oreans has proven it's resilience once more.

This time enough to keep this out of the public for a while.

Proof:

voila.th.jpg

Edited by quosego

  • Author

I was sure you can beat it quosego, you are the best in winlicense. I also never seen a taget hard like this, and this is the reason why i decided to post it here and, obviously, only one person can do.

Props quosego, I'm majorly impressed :)

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.