Reverse Engineering Team Board

Reverse Engineering Team Board (http://www.reteam.org/board/index.php)
-   File Unpacking (http://www.reteam.org/board/forumdisplay.php?f=27)
-   -   Unknown Pack // Themida + ?? (http://www.reteam.org/board/showthread.php?t=4629)

zaappedro 02-26-2012 12:44 PM

Unknown Pack // Themida + ??
 
Hey.....

I have a file that i Know have a Winlicense Protection.... for start make a Cracked version I need find more about the protections...

But Every Detector program that I have tryed, don't work all they don't find anyone protection.....

When I Open this file in the ollydbg, I got this 2 mensages:

1-Module 'GameServ' has entry point outside the code (as specified in the PE header). Maybe this file is self-extracting or self-modifying. Please keep it in mind when setting breakpoints!"

2- Quick statistical test of module 'GameServ' reports that its code section is either compressed, encrypted, or contains large amount of embedded data. Results of code analysis can be very unreliable or simply wrong. Do you want to continue analysis?


How I can Find more infos, like the version of Themida and if have some other packer ins this file???

Anyone have a Tutorial that works for this file??

OBS:
PEid -- FAIL
RGB -- FIIL
protectionID -- FAIL



Program Link: http://www.4shared.com/rar/CBRrbAnp/...l?refurl=d1url
File : GameServer.exe



Thanks!!!

kao 02-26-2012 01:08 PM

Someone already told you on Tuts4You - your file is protected with Winlicense and for unpacking you can use script from http://forum.tuts4you.com/topic/2555...ro-edition-12/

zaappedro 03-04-2012 02:16 PM

Quote:

Originally Posted by kao (Post 32700)
Someone already told you on Tuts4You - your file is protected with Winlicense and for unpacking you can use script from http://forum.tuts4you.com/topic/2555...ro-edition-12/

I follow that tutorial.... but not Work..... i need know the exact version of file, to make better searchs on the web....

any idea for find the exact version???


All times are GMT -4. The time now is 08:30 AM.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.