[Unpackme][Crackme] EC CANU, arabic/app with full EC protection -&#62

[Apuromafo]

Canu

is not easy, is

VM Entrypoint is low 2.4.1

Full protected, delphi app

os:Xp not tested in 7

protection:EC

try to check imagebase (check the unpacked is low that normal other packeds) + restore stolen oep real,

try to unpack full+imagebase+restore the stolen+the checking to stop the bomb

any suggestion in english if someone wana check, not only unpack

the author is arabic, but this are a nice unpackme/crackme

here the Crackme:

CanU.rar

(i was writed this spanish mode 81 pag tut, ) i wait some check this please , i will wait if someone wana do a better tutorial in english

but if someone wana check this are my solution+ the original unpackme is a tutorial way to try to do something and not say that not are posible

here my tut, if someone wana complement with my spanish write text here are:

canu_feb_2011.pdf

and check the real canu:

CanU.rar

greetings Apuromafo

[BLaCkViRuS]

Hi Dear Apuromafo

Thank you from tutrial

[EvOlUtIoN]

i try it and it and i tell you my results.

[BLaCkViRuS]

File Unpacked

and Crack it later in my free time

CanU_Unpacked By BLaCkViRuS.rar

[Apuromafo]

as was sayed, are many details , nice that will check Evolution

testing unpacked yes run, :

when check unpacked v1

show debugger detected 97 in windows 7, and too a exception

---------------------------

Error

---------------------------

[97] Debugger detected - please disable it and restart the application.

---------------------------

Aceptar

---------------------------

---------------------------

CanU_Unpacked By BLaCkViRuS.exe - Error de aplicación

---------------------------

La instrucción en 0x000a1d83 hace referencia a la memoria en 0x2b1820aa. La memoria no se pudo read.

Haga clic en Aceptar para finalizar este programa

---------------------------

Aceptar

---------------------------

@editing

Greetings Apuromafo

Apuromafo