[unpackme] UnpackMe (Crackme) VMprotect 2.x

[Asian Dragon]

Packed: VMProtect 2.x

 

 

 

http://www.mediafire.com/?g97n6es3rc36452

Edited April 24, 2013 by xuan khanh

[Raham]

Hi

 

 

 

And Here is Unpacked File....

 

 

 

 

 

 

Fixed.

 

 

Kind Regards

Unpacked_2.rar

Edited April 24, 2013 by Raham

[converse]

registration is under vm

unpacked_.rar

[converse]

@ Raham

when you enter arbitrary data in the registration form your unpacked file crash

[Raham]

@Converse

 

 

Unpacked File Fixed And ReAttached in First Post

 

 

Kind Regards

[simple]

Couldn't fully unpack nor keygen this file Fun challenge

 

This might have some errors,

 

 

1. Run file outside of debugger

 

2. Attach, press f9, then go to threads and view the active one (sometimes thread exit)

 

3. Here u can enter either nothing, or a letter in the password box to get an exception and olly breaks

 

4. The "too short"/"enter integer", and input strings should be visible on the stack and follow the strings/input in the dump to set mem breakpoints on both, then run again

 

5. Sometimes in stepping some intermodular calls to use were visible, sometimes only SendMessage & heap ones.

 

Here basic patches are seen, or keep stepping to a keygen : )

 

 

 

Edited April 25, 2013 by simple

[Teddy Rogers]

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

[Asian Dragon]

Thanks everyone.

Edited April 26, 2013 by xuan khanh

[GIV]

Unpacked via LCF-AT script....

[Asian Dragon]

Thank you GIV

[av999]

432f0f---- 

RtlLeaveCriticalSection or RtlDeleteCriticalSection ?

[av999]

RtlLeaveCriticalSection 

from Raham's unpack