As I promised here comes the next movie tutorial and a updated script which now also supports VMProtect 2.0. As always you can see in the movie how to use it correctly. My unpack target which I have selected was the VMProtect 2.0 Ultimate itself [Demo] version. I also declare you how to rebuild the OEP in this target. Moreover you will see a second show movie about the VMProtect 2.0.1.2 itself which I also unpacked. This version has some more features than the Ultimate version.
So I fixed also some small bugs in the script and added some more functions. So read all messages which you get with attention before you press a button. For VMP 1.8 - 2.0 you can choose the API TRACER to get all needed addresses, dwords,api´s, module infos into a new file. The trace process can take a longer time if you work with a low system so for this problem I have added the possibility that you can always cancel the current process. Just stop the script if you want... if you then restart Olly and the script then it will work further from the last stop.
Some words to the "PE Header Fixing". This you will need for example for the VMProtect 2.0.1.2 itself so till now it was the only target which I have found which used this protection but I added the fix function also now in the new script. Just use it if you need it.It can also prevent some "File corrupted!...." messages. If you get still this message after fixing the PE then your target can also use some CRC checks.
Download: http://www.megaupload.com/?d=XBQYAZF6
Read More!
Showing posts with label Tutorials. Show all posts
Showing posts with label Tutorials. Show all posts
Unpacking VMProtect 1.7 - 1.8 Tutorial Set & Script by LCF-AT
What's inside?All belong together!
******************************************************
Vid_01. Unpacking VMProtect 1.7 - 1.8 Debugger and system setup.swf
Vid_02. Unpacking VMProtect 1.7 - 1.8 OEP and API analysis.swf
Vid_03. Unpacking VMProtect 1.7 - 1.8 Unpacking VMP 1.7 target.swf
Vid_04. Unpacking VMProtect 1.7 - 1.8 Unpacking VMP 1.8 target.swf
Vid_05. Unpacking VMProtect 1.7 - 1.8 Test all unpacked files.swf
Six small exsample targets.Three protected by VMProtect 1.8 and three more protected by VMProtect 1.7.I added also all unpacked files and txt & mem files which was created by my script so that you can also understand & test it.
VMProtect 1.7 - 1.8 OEP & Unpack Helper 1.0.txt / 37 KB
The script content some diffrent methods which you can choose so it`s also important to choose these in the right turn you know.So just watch all movies and then you can start to unpack something by youself with the script.This prevents also me for some unnecessary questions later.Try also to use the same or higher ODbgScript.dll plugin v1.76.3 to prevent mistake`s!
I also added the Nooby.dll in my package and I explain what the dll makes.I also have made my script compatible for this dll and VMProtect 1.8 versions if you want to use this dll but this is not required so you have the choice.I show you also how to get the dumped files working for other OS which you can also see in Vid_05.So all in all I can say it´s the biggest tutorial which I have made till now so the package size of 30 MB so I hope you have a little bit time to watch all.
So then I have no more to tell at the moment about it.Now I whish all interested people much fun at watching all movies and I also hope that you get it also working for you.If you get after all still some problems during the unpack process then you can use this topic to put your questions in here.
DownLoadLink:
http://www.megaupload.com/?d=33QZB757
PASS: VMP_UNPACKING_SET Read More!
******************************************************
Vid_01. Unpacking VMProtect 1.7 - 1.8 Debugger and system setup.swf
Vid_02. Unpacking VMProtect 1.7 - 1.8 OEP and API analysis.swf
Vid_03. Unpacking VMProtect 1.7 - 1.8 Unpacking VMP 1.7 target.swf
Vid_04. Unpacking VMProtect 1.7 - 1.8 Unpacking VMP 1.8 target.swf
Vid_05. Unpacking VMProtect 1.7 - 1.8 Test all unpacked files.swf
Six small exsample targets.Three protected by VMProtect 1.8 and three more protected by VMProtect 1.7.I added also all unpacked files and txt & mem files which was created by my script so that you can also understand & test it.
VMProtect 1.7 - 1.8 OEP & Unpack Helper 1.0.txt / 37 KB
*************************************************** ( 1.) OEP Finder ( 2.) API Place Finder Break & LOG ( 3.) Creating IATPATCH.txt & IAT_INLINE Section M|2 ( 4.) Creating Session Info File ( 4.) Creating Extra APIs For Some Cases How to Use Information`s | Step List Choice *************************************************** You have 3 methods | Follow this | *2=1 *2=2 *3=3 * * *2 <- Search the API Holder Address [1] * *1 <- Search the OEP / SubRoutine Address [2] * *3 <- Write IATPATCH.txt File [3] *
*************************************************** The script content some diffrent methods which you can choose so it`s also important to choose these in the right turn you know.So just watch all movies and then you can start to unpack something by youself with the script.This prevents also me for some unnecessary questions later.Try also to use the same or higher ODbgScript.dll plugin v1.76.3 to prevent mistake`s!
I also added the Nooby.dll in my package and I explain what the dll makes.I also have made my script compatible for this dll and VMProtect 1.8 versions if you want to use this dll but this is not required so you have the choice.I show you also how to get the dumped files working for other OS which you can also see in Vid_05.So all in all I can say it´s the biggest tutorial which I have made till now so the package size of 30 MB so I hope you have a little bit time to watch all.
So then I have no more to tell at the moment about it.Now I whish all interested people much fun at watching all movies and I also hope that you get it also working for you.If you get after all still some problems during the unpack process then you can use this topic to put your questions in here.
DownLoadLink:
http://www.megaupload.com/?d=33QZB757
PASS: VMP_UNPACKING_SET Read More!
ASProtect SKE v2.x Unpacking Tuts
ASProt_unp.rar
http://www.megaupload.com/?d=X0FDMFTS
---------------
ASProtect 2.3 SKE (Bypass HardwareID Lock).rar
http://www.megaupload.com/?d=MOKUV0DV
---------------
ASProtect 2.4 SKE (OEP + Advanced Import Protection).rar
http://www.megaupload.com/?d=TU6RS5T4
---------------
ASProtect 2.xx (Attack on Activation Key).rar
http://www.megaupload.com/?d=G50HQ4JD
---------------
ASProtect SKE Unpacking Approach.rar
http://www.megaupload.com/?d=31QQJ28M
---------------
ASProtect.SKE2.x Unpacking.rar
http://www.megaupload.com/?d=SIG6MVN0
---------------
Asprotect_Ske2.3_U_Series.rar
http://www.megaupload.com/?d=2YVX75F0 Read More!
http://www.megaupload.com/?d=X0FDMFTS
---------------
ASProtect 2.3 SKE (Bypass HardwareID Lock).rar
http://www.megaupload.com/?d=MOKUV0DV
---------------
ASProtect 2.4 SKE (OEP + Advanced Import Protection).rar
http://www.megaupload.com/?d=TU6RS5T4
---------------
ASProtect 2.xx (Attack on Activation Key).rar
http://www.megaupload.com/?d=G50HQ4JD
---------------
ASProtect SKE Unpacking Approach.rar
http://www.megaupload.com/?d=31QQJ28M
---------------
ASProtect.SKE2.x Unpacking.rar
http://www.megaupload.com/?d=SIG6MVN0
---------------
Asprotect_Ske2.3_U_Series.rar
http://www.megaupload.com/?d=2YVX75F0 Read More!
Armadillo v4x/5x/6x Unpacking Tuts
arma6.24 tut X Video Converter.rar 1.2MB
http://www.megaupload.com/?d=6E2KNR6P
--------------
Armadillo 6.40 (CopyMem 2 + Debug Blocker).rar 7.7MB
http://www.megaupload.com/?d=3GAKAL0F
--------------
Unpacking Armadillo 4.66 (Debug-Blocker).zip 12.4MB
http://www.megaupload.com/?d=WJNWDJBK
--------------
Unpacking Armadillo 4.66 (Standard).zip 10.16MB
http://www.megaupload.com/?d=HK4WZFP4
--------------
Unpacking Armadillo 4.xx (Standard with Trial Keys).zip 10.29MB
http://www.megaupload.com/?d=7IL608WC
--------------
Unpacking Armadillo 5.xx (Debug-Blocker + new Overlay signature).zip 9.36MB
http://www.megaupload.com/?d=A3YW8D0U
--------------
Unpacking Armadillo v6.xx Debug-Blocker+Nanomites - Pogo Games.zip 5.69MB
http://www.megaupload.com/?d=B7LS4K7L
--------------
Unpacking Armadillo v6.xx Standard - iWin Games.zip 5.74MB
http://www.megaupload.com/?d=KHI59WQD
--------------
Unpacking Armadillo v6.xx Standard - RegCompact.zip 4.98MB
http://www.megaupload.com/?d=XSAUXJ3F Read More!
http://www.megaupload.com/?d=6E2KNR6P
--------------
Armadillo 6.40 (CopyMem 2 + Debug Blocker).rar 7.7MB
http://www.megaupload.com/?d=3GAKAL0F
--------------
Unpacking Armadillo 4.66 (Debug-Blocker).zip 12.4MB
http://www.megaupload.com/?d=WJNWDJBK
--------------
Unpacking Armadillo 4.66 (Standard).zip 10.16MB
http://www.megaupload.com/?d=HK4WZFP4
--------------
Unpacking Armadillo 4.xx (Standard with Trial Keys).zip 10.29MB
http://www.megaupload.com/?d=7IL608WC
--------------
Unpacking Armadillo 5.xx (Debug-Blocker + new Overlay signature).zip 9.36MB
http://www.megaupload.com/?d=A3YW8D0U
--------------
Unpacking Armadillo v6.xx Debug-Blocker+Nanomites - Pogo Games.zip 5.69MB
http://www.megaupload.com/?d=B7LS4K7L
--------------
Unpacking Armadillo v6.xx Standard - iWin Games.zip 5.74MB
http://www.megaupload.com/?d=KHI59WQD
--------------
Unpacking Armadillo v6.xx Standard - RegCompact.zip 4.98MB
http://www.megaupload.com/?d=XSAUXJ3F Read More!
Reversing with Lena151 - Newbie Tutorial Series 01-40
snd-reversingwithlena-tutorial01.tutorialhttp://www.megaupload.com/?d=VJJB8BP6--------------snd-reversingwithlena-tutorial02.tutorialhttp://www.megaupload.com/?d=WG2QWG2S --------------snd-reversingwithlena-tutorial03.tutorialhttp://www.megaupload.com/?d=7YL71IKB--------------snd-reversingwithlena-tutorial04.tutorialhttp://www.megaupload.com/?d=6DJZN4F7--------------snd-reversingwithlena-tutorial05.tutorialhttp://www.megaupload.com/?d=SB5XPJLS--------------snd-reversingwithlena-tutorial06.tutorialhttp://www.megaupload.com/?d=4SSW49ZI--------------snd-reversingwithlena-tutorial07.tutorialhttp://www.megaupload.com/?d=BPB1ZIVO--------------snd-reversingwithlena-tutorial08.tutorialhttp://www.megaupload.com/?d=W0PWNUZZ--------------snd-reversingwithlena-tutorial09.tutorialhttp://www.megaupload.com/?d=FQ3TYTQP --------------snd-reversingwithlena-tutorial10.tutorialhttp://www.megaupload.com/?d=6VGQW4WL --------------snd-reversingwithlena-tutorial11.tutorialhttp://www.megaupload.com/?d=FF2PG7GV --------------snd-reversingwithlena-tutorial12.tutorialhttp://www.megaupload.com/?d=C4VQ1DFU --------------snd-reversingwithlena-tutorial13.tutorialhttp://www.megaupload.com/?d=II72NEYH --------------snd-reversingwithlena-tutorial14.tutorialhttp://www.megaupload.com/?d=ES4VB809 --------------snd-reversingwithlena-tutorial15.tutorialhttp://www.megaupload.com/?d=9HJFNW50 --------------snd-reversingwithlena-tutorial16.tutorialhttp://www.megaupload.com/?d=HOASJ22H --------------snd-reversingwithlena-tutorial17.tutorialhttp://www.megaupload.com/?d=PJO64GEV --------------snd-reversingwithlena-tutorial18.tutorialhttp://www.megaupload.com/?d=GGCD3LB6 --------------snd-reversingwithlena-tutorial19.tutorialhttp://www.megaupload.com/?d=1ZHEZ5BP --------------snd-reversingwithlena-tutorial20.tutorialhttp://www.megaupload.com/?d=6GKE0TJO --------------snd-reversingwithlena-tutorial21.tutorialhttp://www.megaupload.com/?d=NAOC1W8H --------------snd-reversingwithlena-tutorial22.tutorialhttp://www.megaupload.com/?d=MOG0D8PB --------------snd-reversingwithlena-tutorial23.tutorialhttp://www.megaupload.com/?d=CC6264MV --------------snd-reversingwithlena-tutorial24.tutorialhttp://www.megaupload.com/?d=9WRM6QS8 --------------snd-reversingwithlena-tutorial25.tutorialhttp://www.megaupload.com/?d=Z2TPKYT2 --------------snd-reversingwithlena-tutorial26.tutorialhttp://www.megaupload.com/?d=MFLE6A0P --------------snd-reversingwithlena-tutorial27.tutorialhttp://www.megaupload.com/?d=QGRUQ3YQ --------------snd-reversingwithlena-tutorial28.tutorialhttp://www.megaupload.com/?d=V3BN7XBN --------------snd-reversingwithlena-tutorial29.tutorialhttp://www.megaupload.com/?d=DSZ3DJYI --------------snd-reversingwithlena-tutorial30.tutorialhttp://www.megaupload.com/?d=822H7L39 --------------snd-reversingwithlena-tutorial31.tutorialhttp://www.megaupload.com/?d=EB51R7KM --------------snd-reversingwithlena-tutorial32.tutorialhttp://www.megaupload.com/?d=NHN6RZK6 --------------snd-reversingwithlena-tutorial33.tutorialhttp://www.megaupload.com/?d=HDFWGHC0 --------------snd-reversingwithlena-tutorial34.tutorialhttp://www.megaupload.com/?d=1AW9G7G6 --------------snd-reversingwithlena-tutorial35.tutorialhttp://www.megaupload.com/?d=9TZNY47J --------------snd-reversingwithlena-tutorial36.tutorialhttp://www.megaupload.com/?d=Z2HQ6X27 --------------snd-reversingwithlena-tutorial37.tutorialhttp://www.megaupload.com/?d=AAK76GE8 --------------snd-reversingwithlena-tutorial38.tutorialhttp://www.megaupload.com/?d=2I3AIK9Y --------------snd-reversingwithlena-tutorial39.tutorialhttp://www.megaupload.com/?d=UZ8KWFHV --------------snd-reversingwithlena-tutorial40.tutorialhttp://www.megaupload.com/?d=B4KFIDUH
Read More!
Learn Keygenning
UltraEdit Keygenning Tutorial by TonyWeb: 434KB
http://www.megaupload.com/?d=HFLD5E8G
---------------
Keygenning Easy: 65MB
http://www.megaupload.com/?d=YK0RQBMT Read More!
http://www.megaupload.com/?d=HFLD5E8G
---------------
Keygenning Easy: 65MB
http://www.megaupload.com/?d=YK0RQBMT Read More!
WinLicense 2.0.6.5 (Patching Registered Dwords)
Download:
http://www.megaupload.com/?d=YQ0H54IE Read More!
http://www.megaupload.com/?d=YQ0H54IE Read More!
Unpacking n Cracking Rar Repair Tool v3.0
Download: 1.59MB
http://www.megaupload.com/?d=6K9O60Y5 Read More!
http://www.megaupload.com/?d=6K9O60Y5 Read More!
A tales of reversing & keygenning two MD5 registration schemas
Download: 1.17MB
http://www.megaupload.com/?d=6LWI6AXE Read More!
http://www.megaupload.com/?d=6LWI6AXE Read More!
Patching VB Applications Using Olly by Shub-Nigurrath
Download: 629KB
http://www.megaupload.com/?d=Q4Y94R20 Read More!
http://www.megaupload.com/?d=Q4Y94R20 Read More!
Patch HWID Execryptor v2.4.1 by Trickyboy
Download: 931KB
http://www.megaupload.com/?d=IJ1ZGEBK Read More!
http://www.megaupload.com/?d=IJ1ZGEBK Read More!
nBinder Password Finder
Its not the crc of the file its self it is a value that is stored inside the app.....if you set a BP on GetDlgItemTextA you should break after entering the password where as followed by a call which computes the crc32 of the password entered, result will be in EAX and gets compared to the value in ESI the value in ESI is the crc32 of the correct password and that is the value needed for bruteforcing.
Read More!
Kill Startup Nags The Easy Way !
Kill Startup Nags The Easy Way !
the startup nag is "Please register....."
i searched for the nag in the hex editor ( i am using hex workshop )and
found it to be at
00054460 !
just before this line (at 00054450 ) i found that a value of "C0" was
present ....... i converted it to "20" and saved the file and voila no
nag screen !
i tried a few appz after thus discovery and found that i was able to
remove the start up nags in most of them !
but remember it dosent work every where !.......other values can be
changed tooo ...... to remove the nag !
TRY THIS ONLY WHEN YOU HAVE LOST ALL HOPE IN REMOVING THE NAGS (because
this is dumb!) ........... and dont forget to make a backup before ! Read More!
the startup nag is "Please register....."
i searched for the nag in the hex editor ( i am using hex workshop )and
found it to be at
00054460 !
just before this line (at 00054450 ) i found that a value of "C0" was
present ....... i converted it to "20" and saved the file and voila no
nag screen !
i tried a few appz after thus discovery and found that i was able to
remove the start up nags in most of them !
but remember it dosent work every where !.......other values can be
changed tooo ...... to remove the nag !
TRY THIS ONLY WHEN YOU HAVE LOST ALL HOPE IN REMOVING THE NAGS (because
this is dumb!) ........... and dont forget to make a backup before ! Read More!
Inside Code Virtualizer by scherzo
Download: 2.49MB
http://www.megaupload.com/?d=K6D3FY0Y Read More!
http://www.megaupload.com/?d=K6D3FY0Y Read More!
Another hint to enable buttons under VB6
Download: 213KB
http://www.megaupload.com/?d=FTFJJVC3 Read More!
http://www.megaupload.com/?d=FTFJJVC3 Read More!
