Jump to content
Tuts 4 You

ByUndefined Protector + Enigma


Recommended Posts

Posted

ByUndefined Protector + Enigma


ByUndefined Protector + Enigma

Anti Debugger
Anti Dump
Anti Tamper
Anti ILDasm
Resources Compress
String Encrypt
ControlFlow
Virtualization


Purpose: You need to patch or unpack the correct key.


 

sahteuser
Posted

image.png.8bb2f92c26aee7e5c4ff4dc9335bdf84.png

 

First step for a beginner.
But the program did not work. Thanks for your help in advance.

  • Like 1
jackyjask
Posted

what was your 1st step then?

(from the screen above all the methods are empty - why?)

  • Like 1
CodeExplorer
Posted

Step1: Load the file with SHADOW Olly - OLLYDBG.EXE; or RAMODBG_X2
it will break on:

0048839E >-FF25 00204000    JMP DWORD PTR DS:[0x402000]              ; mscoree._CorExeMain

There is no need to dump it; everything is already there; you have to fix MetadaRva;
and many other stuff.
From some reason assembly won't start after fixing in my case.
 

 

  • Like 2

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...