Posted August 22, 20178 yr Difficulty : 4+Language : JavaPlatform : Windows x32OS Version : Windows 7 and upPacker / Protector : Excelsior JET Description : Good Luck Screenshot : Demo.7z
September 13, 20177 yr Nice 176496F0 54 00 53 00 52 00 48 00 T.S.R.H. 17649700 2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00 -.2.7.7.4.2.-.F. 17649710 53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00 S.V.E.D.-.T.S.R. 17649720 48 H Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it. routine starts at : 00405A00 Regards, Tony Edited September 13, 20177 yr by tonyweb
November 10, 20186 yr On 9/13/2017 at 3:44 PM, tonyweb said: Nice 176496F0 54 00 53 00 52 00 48 00 T.S.R.H. 17649700 2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00 -.2.7.7.4.2.-.F. 17649710 53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00 S.V.E.D.-.T.S.R. 17649720 48 H Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it. Hide contents routine starts at : 00405A00 Regards, Tony How to find routine?
Create an account or sign in to comment