Excelsior JET 12 Std

[Modify]

Difficulty : 4+
Language : Java
Platform : Windows x32
OS Version : Windows 7 and up
Packer / Protector : Excelsior JET

Description :

Good Luck

Screenshot :

 

Demo.7z

[man of the war]

Easy

TSRH-27742-FSVED-TSRH

[khodam]

please video tutorial

thanks

[man of the war]

Just Waiting Some If No 1 There I make Tut

 

regards

[tonyweb]

Nice

176496F0                          54 00 53 00 52 00 48 00          T.S.R.H.
17649700  2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00  -.2.7.7.4.2.-.F.
17649710  53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00  S.V.E.D.-.T.S.R.
17649720  48                                               H
	

Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it.

 

routine starts at : 00405A00

Regards,
Tony

Edited September 13, 2017 by tonyweb

[zodiac]

On 9/13/2017 at 3:44 PM, tonyweb said:

Nice

176496F0                          54 00 53 00 52 00 48 00          T.S.R.H.
17649700  2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00  -.2.7.7.4.2.-.F.
17649710  53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00  S.V.E.D.-.T.S.R.
17649720  48                                               H
	

Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it.

  Hide contents

routine starts at : 00405A00

 Regards,
Tony

How to find routine?