[unpackme] ElCrabe's VM

[r0ket]

Im currently developing my protector, here is an unpackme that is using vm. Consists in EP and Payload virtualization.

Edit:

Easiest task was completed - VM code at EP was solved by copying initialization code from other Delphi app (HSN.C3r).

The hardest one solved - our hero is (LCF-AT)

Edited November 9, 2010 by ElCrabe

[HSN.C3r]

Unpacked & only VM of Entry Point solved :

dumped_.rar

[r0ket]

HSN.C3r

Thx ! As i see it was solved using EP code from another delphi application .

Edited November 7, 2010 by ElCrabe

[EvOlUtIoN]

normally a running unpacked program is evaluated as good indeed, can be too boring to analyze and rebuild all vm...

[LCF-AT]

Hi,

ok today I had a look on it.

So I have it unpacked.

1. My Unpacked file works + calculation of xy values which you can enter.

2. Is this a fake unpackme?So if my file works for you + calc then its a very easy unpackme.

Just test my file + calc button and tell whether it works.

greetz

UnpackMe.cc_Unpacked.rar

[blackpirate]

Works smooth on win 7 32 bit!

nice done!

cheers

[r0ket]

LCF-AT Thanks ! How much time u waste for it ?

[LCF-AT]

@ ElCrabe

3 minutes.Are you surprised now?

PS: Analyze your protection again to find the reason.

greetz

[r0ket]

LCF-AT Got it ! I lol'd from myself