Packed: VMProtect 2.x

 

 

 

http://www.mediafire.com/?g97n6es3rc36452

Edited April 24, 201312 yr by xuan khanh

Hi

 

 

 

And Here is Unpacked File....

 

 

 

 

 

 

Fixed.

 

 

Kind Regards

Unpacked_2.rar

Edited April 24, 201312 yr by Raham

registration is under vm

unpacked_.rar

@ Raham

when you enter arbitrary data in the registration form your unpacked file crash

@Converse

 

 

Unpacked File Fixed And ReAttached in First Post

 

 

Kind Regards

Couldn't fully unpack nor keygen this file Fun challenge

 

This might have some errors,

 

 

1. Run file outside of debugger

 

2. Attach, press f9, then go to threads and view the active one (sometimes thread exit)

 

3. Here u can enter either nothing, or a letter in the password box to get an exception and olly breaks

 

4. The "too short"/"enter integer", and input strings should be visible on the stack and follow the strings/input in the dump to set mem breakpoints on both, then run again

 

5. Sometimes in stepping some intermodular calls to use were visible, sometimes only SendMessage & heap ones.

 

Here basic patches are seen, or keep stepping to a keygen : )

 

 

 

Edited April 25, 201312 yr by simple

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

Thanks everyone.

Edited April 26, 201312 yr by xuan khanh

Unpacked via LCF-AT script....

Thank you GIV

432f0f---- 

RtlLeaveCriticalSection or RtlDeleteCriticalSection ?

RtlLeaveCriticalSection 

from Raham's unpack