[Unpackme] IntelliProtect v2.15

[Saduff]

After playing around with this protector for some time, I came to the conclusion that this protector can't be unpacked/cracked without a valid key,

because when you give it a valid key, the server will send you a file "rcertificate.dat" that contains executable code and imports.

The file is held in C:\Documents and Settings\All Users\Application Data\IProt\%ProjectName%.

The protector uses WriteProcessMemory and uses data from rcertificate.dat.

It is a mystery how Raham managed to fix all Imports. He can't have done it without a valid key, but how did he get a valid key?

After original file is run, it will be very very easy to unpack though.

Edited August 1, 2011 by Saduff

[BLaCkViRuS]

Thank Dear Saduff For Info

you can't fix imports without valid key but Raham Unpacked File With Supid Method and he said in first post

Intelli Protector with valid Key is Like UPX but without valid key ....

Thanks Again Bro

[_Ghost_]

very nice explanation saduff... yes you are right i unpacked this protector with a valid key. it can be unpacked very easily. but its nearly impossible to play with it if you dont have valid key ...