[UnPackMe] ConfuserEX 0.4.0 Only compression used.

[madskillz]

If it cannot run then is not unpacked=not good for any use.

 

Yeah no use.

 

But some progress.

 

So where I went wrong ?

[kao]

That's because "noobs" start to do things upside down. Start from the most complicated thing (read protector) to the easy one.

The things must go from easy to hard.

This. 10x this.

 

You are clicking random buttons in Olly without any understanding what are you doing and why. If you had spent any time reading about Confuser (yes - Confuser, not ConfuserEx) protections, you'd know what is "koi module" and what to do with it.

[madskillz]

Found the problem.

 

Entrypoint was missing.

 

Corrected by adding that

 

Thank you.

 

So the unpacking for only compression used settings on default confuserex can be done by dumping the koi module and fixing the EP.

Edited March 22, 2015 by madskillz

[atom0s]

I don't see an issue with people posting simple crackme's / unpackme's etc. asking for tutorials. People want to learn how to do things manually rather then using tools posted on this site ( and many others ) that automate things. Problem there is that those tools do not always work and that person is left clueless on how to unpack something because no one wants to share info on it because 'tools exist' or some other lame excuse. 

 

Unpackme's have always been the same, a simple non-commercial application gets packed into a packer, and then is requested to be undone with a tutorial. How has that changed? Commercial requests are not allowed on this site, and if the unpackme is not something that person has permission to upload here, then it is deleted. 

 

The only thing that differs is crackme / keygenme applications, where people have to reverse the algo's or similar. 

 

I personally see no harm done in someone new coming here looking to learn. So what if they posted a packer you personally consider to be a joke / easy. Let alone open source. Not everyone is a coder or understand how to read code, but can be amazing reverse engineers. Some of my personal friends are awesome at RE but couldn't code even a simple hello world application. Not everyone has the same experience as the next person. 

 

What is the harm in asking for a tutorial on how to manually unpack something? I find that to be better then people begging for tools to automate the process entirely. At least they are willing to learn something where as the tool user just wants it done for them entirely.