Jump to content
Tuts 4 You
  • 0
Modify

Excelsior JET 12 Std

Question

Modify

Difficulty : 4+
Language : Java
Platform : Windows x32
OS Version : Windows 7 and up
Packer / Protector : Excelsior JET

Description :

Good Luck

Screenshot :

Capture.JPG.d9c0a79a638dd171e1ea5de4f147a1e5.JPG.jpeg.4292916e69a4aacfaf5968f2effcb3ed.jpeg

 

Demo.7z

Share this post


Link to post

5 answers to this question

Recommended Posts

  • 1
man of the war

Easy

TSRH-27742-FSVED-TSRH

  • Like 1

Share this post


Link to post
  • 0
khodam

please video tutorial

thanks

Share this post


Link to post
  • 0
man of the war

Just Waiting Some If No 1 There I make Tut

 

regards

Share this post


Link to post
  • 0
tonyweb

Nice :)

176496F0                          54 00 53 00 52 00 48 00          T.S.R.H.
17649700  2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00  -.2.7.7.4.2.-.F.
17649710  53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00  S.V.E.D.-.T.S.R.
17649720  48                                               H
	

Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it. :)

 


routine starts at : 00405A00

Regards,
Tony

Edited by tonyweb (see edit history)
  • Like 2

Share this post


Link to post
  • 0
zodiac
On 9/13/2017 at 3:44 PM, tonyweb said:

Nice :)


176496F0                          54 00 53 00 52 00 48 00          T.S.R.H.
17649700  2D 00 32 00 37 00 37 00 34 00 32 00 2D 00 46 00  -.2.7.7.4.2.-.F.
17649710  53 00 56 00 45 00 44 00 2D 00 54 00 53 00 52 00  S.V.E.D.-.T.S.R.
17649720  48                                               H
	

Just identify the string-load routine (does also some simple xoring) and put a disabled bp on it till main window shows up. Then enable the BP, click the button and trace a bit (check what's xoring) ... that's it. :)

  Hide contents


routine starts at : 00405A00

 Regards,
Tony

How to find routine?

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×