ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Thu Sep 21, 2017 12:24 pm

All times are UTC




Post new topic  Reply to topic  [ 96 posts ]  Go to page Previous 1 2 3 4 5 Next
Author Message
PostPosted: Mon Oct 26, 2015 12:42 pm 

Joined: Sat Aug 09, 2014 2:54 pm
Posts: 6
Hi CriticalError. Can you help unpack Themida from Genesis 4 Online (http://genesis4.co.kr)? :roll:

http://softmax.genesis4.xdn.kinxcdn.com ... loader.exe

or https://drive.google.com/folderview?id= ... e_web#list

Thanks Advance.


Top
   
PostPosted: Mon Oct 26, 2015 4:18 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
upload just the binaries, I can't download full client.


Top
   
PostPosted: Mon Oct 26, 2015 4:31 pm 

Joined: Sat Aug 09, 2014 2:54 pm
Posts: 6
Ops, sorry. :)

https://www.sendspace.com/file/lemvbk

Thanks Advance.


Top
   
PostPosted: Mon Oct 26, 2015 5:42 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
ok anyway I try unpack your file, for some reason in the process it finish process and stop there the unpacking so well I try check what I can do later, sorry.


Top
   
PostPosted: Mon Oct 26, 2015 6:23 pm 

Joined: Sat Aug 09, 2014 2:54 pm
Posts: 6
Ok, thank you :)


Top
   
PostPosted: Tue Nov 10, 2015 3:11 pm 

Joined: Tue Nov 10, 2015 3:08 pm
Posts: 1
I can´t unpack mine too.The application just crashes.
I sent it to your pm.
If you can, can you sent me your´s ollydbg folder and show me how?

Thx
Sadfaffel


Top
   
PostPosted: Thu Nov 19, 2015 6:18 pm 

Joined: Thu Nov 19, 2015 6:16 pm
Posts: 1
Hello Critical, when i try to unpack in step with i need to edit olly.ini and before that i resume, my olly crashes.

This is the two files i need to unpack.

https://www.sendspace.com/file/psu5rd

https://www.sendspace.com/file/qyl6k4


Top
   
PostPosted: Tue Dec 01, 2015 2:31 am 

Joined: Tue Dec 01, 2015 2:29 am
Posts: 3
It says KernelMode doesnt work in 64 bit systems and my unpack process is not giving the exact screen shots after the changes in the ini file. can you help me ?


Top
   
PostPosted: Tue Dec 01, 2015 3:28 am 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
you can't unpack themida in x64 with ollydbg, if you read carefuly OLLYDBG is a debugger for x32, so in this case you need try use xdbg from mrexodia, is a debugger in base a ollydbg but for x64, so well you can try.


Top
   
PostPosted: Tue Dec 01, 2015 4:23 pm 

Joined: Tue Dec 01, 2015 2:29 am
Posts: 3
thanks for the answer. But where can I find those plugins for xdbg? Im total lost here.
I find there is already some script engine there, but it says duplicate label: FINAL_RESULT.


Top
   
PostPosted: Tue Dec 01, 2015 8:24 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
as far I know it won't exist, just try do it in SO of x86 arquitecture.


Top
   
PostPosted: Thu Dec 03, 2015 12:25 pm 

Joined: Thu Dec 03, 2015 12:24 pm
Posts: 1
Image
What I can do?
I have x64 PC,is possible to found plugins for xDBG ,cause I have label duplicate FINAL_RESULT.


Top
   
PostPosted: Thu Dec 03, 2015 7:01 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
for unpack a target of x32 with SO of x64 you need use other plugins, thats the problem with Windows 7, 8,1,etc if you use XP is not a problem, the main problem is Themida don't work.


Top
   
PostPosted: Thu Dec 03, 2015 9:13 pm 

Joined: Tue Dec 01, 2015 2:29 am
Posts: 3
all right, thanks for the information. Ill try it in a few days and I come back here if I find any problems.


Top
   
PostPosted: Sun Dec 06, 2015 7:32 am 
User avatar

Joined: Sat Dec 27, 2014 8:49 pm
Posts: 92
Windows 7 32bit works fine for unpacking with this script.

If you have a 64bit OS you can download a virtual machine program like VirtualBox, VMWare, etc. to just run another 32bit os in a virtual machine instead of reinstalling your OS.

_________________
My personal site: http://atom0s.com
Donations can be made via Paypal: Click Here


Top
   
PostPosted: Mon Dec 21, 2015 11:14 am 

Joined: Mon Dec 21, 2015 11:09 am
Posts: 1
hi , i used the unpack script and don't work done..

the resposne message : [ when the i was running script ]

"If WL doesen't use a MessageBoxExA API to show you the HWID Nag
or other messages then it used a custom code.In this case just pause
the script if you see the message then pause Olly open call stack and
set a soft BP from where it was called from = after message loop.Now
remove BP again and set the script eip on the label......"

...

i want to know i bp where ? bp what time?

thank you very much...


Top
   
PostPosted: Tue Dec 22, 2015 3:05 pm 

Joined: Tue Dec 22, 2015 3:02 pm
Posts: 1
Can you try please with this file?
https://www.sendspace.com/file/ehrzot

I tried but I get different messages from Odbg, I am probably doing something wrong...


Top
   
PostPosted: Tue Dec 22, 2015 8:09 pm 

Joined: Tue Dec 22, 2015 8:08 pm
Posts: 1
Can you try to unpack this file for me?

I've been trying all week and no success.

https://www.sendspace.com/file/q9mkjo

Thank you in advance.


Top
   
PostPosted: Sun Jan 10, 2016 9:45 am 

Joined: Sun Jan 10, 2016 9:42 am
Posts: 2
i did well until now!

BUT

when i check no at when asked to check NOPPER..

then nothing happen....

i could see Xbundler prepair sign not found! at log window...

windows7 or high blarblar... then should i use windows XP? Not Vista? (I'm Vista user)

and... it say.. " if Xbundler found in auto-modus , it will dump blarblar... then should i download Xblunder..?

do u know why?

if u want see my EXE, then i will upload.. plz answer!!

ps my computer is 32bit

and i did all and clear !


Top
   
PostPosted: Sun Jan 10, 2016 2:51 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 182
you need use Windows XP to unpack this targets as well, if you will use W7 need other plugins are not incluided in this topic.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 96 posts ]  Go to page Previous 1 2 3 4 5 Next

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited