MUPS | Reverse Engineering b10g

This package is intended to fill the vacuousness that turns around
the great ExeCryptor.
It’s was born as an essay to understand EC internals and how it
greatly do its job.
This whole project was initiated by a dummy-extremely important
article about the PRN generating and tools coding. (I’ll not go out
of any one’s way by my chitchat so just forget this).

Ok, now the turn of interesting things, The whole stuff will a
series, and will be divided to 3 or 4 parts due to time impediments.
And I’ll publish in each part what I accomplish and comment.

You will find in this package the following files:
+ EC LDE : EC length disasm internal engine.
+ EC_LIB_API_PROCS : Various procedures used by EC to protect API
and LIBS use. It contains:
- EC_GETKERNEL32HANDLE -> The way it grabs kernel32 lib image
base.
- EC_GETPROCADDRESS -> The way it gets API addresses.
- EC_REDIR_BP_CHECKER -> The technique it uses to check API BP
and redir.
+ EC_VIRTUAL_MACHINE : The MUST, it’s EC Virtual Machine Engine and
some tools to reverse it.
+ STRINGS DECRYP-RECRYPTER : EC method to not leave string traces
in code.

With every project you will find tutorial, source code, and tools
so you can study what you want.
DownloadLink: http://rapidshare.com/files/201926381/EC_MEGA_PROJECT.rar

سلامی دوباره December 18, 2008

Posted by reversengineering in NEWS, پارسی.
1 comment so far

سلام به همه دوستان و برو بچ با صفا که همیشه مورد لطف شان بودیم و ما را همیشه شرمنده می سازند

خدا پشتو پناهتون

این چند وقت که نیومدم کلی این نت تغییر کرد

لت ایت بیت که ایران و تحریم کرد برای همین دیگه باید با پروکسی از سایتش دانلود کرد

بعدش اینترنت خودم در نامه بازی های رانژه و تغییر سرویس و غیره سرویس شد

بعدش هم کل اینترنت ایران

خلاصه

اگر الان با کمی مشکل از نظر فایلهای قدیم و اخبار جدید و… مواجه هستید به نظر من برای پوست مان خوب باشه

بیشتر ادما هم الان میرن تو خواب زمستونی و کریسمس و غیره که باعث میشه اوضاع همه چی اروم به نظر بیاد

خوب فعلن با شما خداحافظی میکنم تا یکم زیر افتاب زمستون برنزه بشم

!!!!!

سربلند و پیروز باشید

Detemida 1.0.0.4 December 9, 2008

Posted by reversengineering in OTHER, Themida, TOOLS.
1 comment so far

- Identifing programs proteced by major Themida/WinLicense releases.
- Decode/View Watermarks
- POC to all antivirus companies that Themida protected programs are identical, even with all “Hide from PE Scanners” option on or even heavily DIYed.
- End of hope to those people who wanted to use Themida to protect trojans from antivirus.

http://letitbit.net/download/e49b87485016/Detemida1.0.04.rar.html

http://vip-file.com/download/e49b87440555/Detemida1.0.04.rar.html

3 NEW TUT. BY Joker Italy November 12, 2008

Posted by reversengineering in MUPS, other protectors and packers.
add a comment

Unpack TTProtect 1.05 Options Standard+Debug Middle – New tut September 2008

Unpack Kratos Crypter By RDG ( Good work RDG ) – New tut October 2008

Unpack PFE CX GUI 0.1 – New tut October 2008

http://letitbit.net/download/582d2e679623/Unpack-PFE-By-Joker-Italy.rar.html

http://letitbit.net/download/ba6c54940418/TTProtect-1.05–Standard-Debug-Middle-.rar.html

http://letitbit.net/download/7ccae8455854/Kratos-Crypter–Unpacking-.rar.html

http://rapidshare.com/files/163028511/3_new_tut.rar

Themida and WinLicense 2.0.1.0 (Unpacking) October 29, 2008

Posted by reversengineering in MUPS, Themida.
2 comments

Themida and WinLicense 2.0.1.0 (Unpacking) by LCF-AT

LCF-AT:

Today I show you an example how to unpack Themida / WinLicense

Unpack WinLicense_UnpackMe! v2.0.1.0

- Find OEP / Near OEP / stolen code
- Find IAT / Magic Jump / Use GDI32 – API will not redirect in TM / WL
- Get Full IAT / Fix VM API call´s and jump´s / Use Script
- Repair stolen code / find input and output / log results
- Delete useless section´s to reduce the target size

http://rapidshare.com/files/158581020/Themida_and_WinLicense_2.0.1.0___Unpacking_.rar

http://letitbit.net/download/4c04c9311901/Themida-and-WinLicense-2.0.1.0—Unpacking-.rar.html

new tutorial by Joker Italy September 18, 2008

Posted by reversengineering in MUPS, other protectors and packers, Scripts.
3 comments

Unpack SDProtector 1.16 + SCRIPT

Script SDProtector 1.16 IAT Redirect

http://letitbit.net/download/f45a8a827515/Script-SDProtector-1.16-IAT—Redirect.rar.html

http://letitbit.net/download/b3f419555648/Unpack-SDProtect-1.16—Script-By-Joker-Italy.rar.html

new tutorial by Joker Italy September 16, 2008

Posted by reversengineering in MUPS, other protectors and packers.
add a comment

- New tut September 2008

Unpack IDApplication Protector2.5 + Script

http://rapidshare.com/files/145729373/Unpack_IDApplication_Protector_2.5_By_Joker_Italy.rar.html

http://www.sendspace.com/file/jzn278

http://letitbit.net/download/4474b1543685/Unpack-IDApplication-Protector-2.5-By-Joker-Italy.rar.html

new tut by ChOoki September 4, 2008

Posted by reversengineering in armadillo, MUPS.
add a comment

a flash tutorial + a script on unpacking Real Arcade Wrapper. Needed Olly script plug-ins included.

http://letitbit.net/download/76b280427877/URAW2008.zip.html

joker italy [Full MUP + (pack & unpack )] August 31, 2008

Posted by reversengineering in asprotect, MUPS, other protectors and packers, PACKER, PROTECTOR, Scripts, Themida, TOOLS.
2 comments

all manual unpacking

===============

ASProtect SKE 2.3 Unpacking DLL
Anti 007 2.5
AntiDote 1.4
AR Crypt Private
AT4RE Asm Protector
AT4RE Protector 1
BamBam 0.04
Berio 1.02
BeroEXEPacker 1.0
Cigicigi Crypter 1.0
CriptX MEW11
DCrypt Private 0.9b
DragonArmour

Dumped Asprotect Aspack

ElecKey 2.0
ExE Evil 1.0
EXESmasher 1.0
EXEStealth3.16
fEaRz Packer 0.3
Free Joiner Small 0.15
Gie Protector0.2
H4ck y0u.org Crypter
HAC Crew Crypter
HaLV Crypter
Hide&Protect
Hmimys Packer 1.3
Joker Protector 1.0.8
Joker Protector 1.1.3
KiAms Cryptor 1.4
KKrunchy023
lARP Lite Edition 2.0
Mal Packer 1.2
ModdedFogv1.1
Morphnah
MPack 0.0.3
Muckis Protector II
Nova Cipher 1.0
noX Crypt 1.1
Npack 1.1.800.2008
NtKrnlpacker Secure Suite Script
OSC Crypter
Pain Crew Protector 1.1
Pe Armour 0.765
Pepsi2
Poke Crypter
PolyBox 1.0

Polymorphic Crypter 0.1

Pirate Zylom

Pub Crypter
Russian Cryptor
Secure Shade 1.5
Sexe Crypter 1.1
SoftSentry 3.00
Software Compress ].4
StasFodioCrypter 1.0
Stealth PE 2.2

The Best Cryptor

Themida unleashed
The Zone Crypter
Tubby Crypt 1.1.0
Unamed Scrambler 2.5.2
Undetector 1.2
UPX+UNOpix Scrambler 1.10
USSR 0.31
Vb PowerWrap
VCrypt0.9b
WingsCrypt 1.0
WinUpack 0.399 uPack Mutanter 0.1
WL Crypt 1.0
Zylom Wrapper

PACK AND UNPACK
===============
stlpe20
EPack lite 1 4 final
AT4RE Protector 1 .0
DalKrypt 1.0
eXpresso.v1.4.5.1
FakeNinja PrivateRelase
fsg2.0
L0rD Crypter
NOmeR1
nPack v1.1.300.2006 Beta
Packman 1.0
Petite 2.3
Russian Cryptor ver1
SimbiOZ v2.1
SLVc0deProtector
Spack
tElock 0.99
WindOfCrypt

info:

5*36mg+1*19mg=170mg

uploading by REM

ALL TUTORS + FILES THAT UNPACKED BY Joker Italy

links:

http://depositfiles.com/files/7607608

http://depositfiles.com/files/7608013

http://depositfiles.com/files/7608532

http://depositfiles.com/files/7609143

http://depositfiles.com/files/7609669

http://letitbit.net/download/643660722146/joker-italy–Full-MUP—-pack—unpack—.part1.rar.html

http://letitbit.net/download/5dcce1873656/joker-italy–Full-MUP—-pack—unpack—.part2.rar.html

http://letitbit.net/download/077afd885650/joker-italy–Full-MUP—-pack—unpack—.part3.rar.html

http://letitbit.net/download/0a67b2765939/joker-italy–Full-MUP—-pack—unpack—.part4.rar.html

http://letitbit.net/download/bf4a0793237/joker-italy–Full-MUP—-pack—unpack—.part5.rar.html

ALL ABOUT .net August 31, 2008

Posted by reversengineering in MUPS, other protectors and packers, RCE.
add a comment

—-.NET Resources
A paper on resources and how they can be extracted from assemblies
—.NET PE
file structure a simple illustration for .NET PE File structure
—CodeVeil Manual
Unpacking Unpacking CodeVeil 1.3 dotNet protector with WinHex
—-Advanced Decoding
Extracting encrypted strings from an assembly protected with SmartAssembly protector
—-SmartAssembly Patching
Removing time limit from assemblies protected with SmartAssembly
—-SmartAssembly Patching Advanced
Removing time limit from assemblies protected with SmartAssembly using a Seek and Destroy patcher.
—-Cracking .NET
software Using Reflector and Ildasm to Crack WinXP Manager 5.1.2
—-Cracking Visual Studio Components #2
Removing a nag screen from managed DLLs.
—Byte by Byte
An in depth tutor that requires some PE file structure knowledge, It shows how you can rebuild assemblies protected with codeveil 1.2 protector from a memory dump.
—-Memory Optimization
How to implement memory optimization class in your .NET code to save memory and enhance performance
—Tools & OPCodes
First tutor in the .NET reversing Tips series, It will give you a basic introduction into .NET platform and how to reverse the managed code.
—Cracking Visual Studio
Components #1 Removing protection from managed DLLs.
—-Entry Point Method
The second tutor in .NET reversing Tips series, It discusses the first steps in reversing managed code.
—Introduction to .NET
cracking A comparison between native and managed code reversing methods and tools.
—.NET Basic Patching
The third tutor in .NET reversing Tips series, an introduction to patching in managed code.
— .NET CrackME #1
An introductory tutor that shows you in steps how to reverse a simple CrackME.
—Cracking Photo sorter
A Packed dotNET application. This is a new tutor on cracking a packed .NET application. I hope it’s useful.
—-Planner.net
A video tutor that shows in steps how to remove a nag string protection from a visual studio component, It explains patching using WinHex and Ildasm.
—Cracking Rebex.FTP Components
This is a new tutor on cracking managed DLLs
—-dotNET Tracer patching

thanks fly to Bl@ckStorm Team

http://letitbit.net/download/97bd8a399498/dotNET-Tracer-patching.rar.html

http://letitbit.net/download/241430310456/how-you-can-rebuild-assemblies-protected-with-codeveil-1.2.rar.html

http://letitbit.net/download/308e8c113593/Introduction-to-.NET-cracking.rar.html

http://letitbit.net/download/b4a23b450840/EntryPoint.rar.html

http://letitbit.net/download/d40319153468/Cracking-Visual-Studio-Components–1.rar.html

http://letitbit.net/download/59151f609667/Cracking-Photo-sorter.rar.html

http://letitbit.net/download/b321cf182809/dotNET-PE-.NET-PE-file-structure-.rar.html

http://letitbit.net/download/d4031961878/Cracking-Visual-Studio-Components–1.rar.html

http://letitbit.net/download/280b44443991/Cracking-Rebex.FTP-Components.rar.html

http://letitbit.net/download/71477a39179/Planner.net-remove-a-nag-string-protection-from-a-visual-studio-component-.rar.html

http://letitbit.net/download/67b174497403/CodeVeil-Manual-Unpacking.rar.html

http://letitbit.net/download/8f648a796789/Cracking-.NET-software.rar.html

http://letitbit.net/download/f88bbd964249/Advaned-Decoding.rar.html

http://letitbit.net/download/19b54b331107/.NET-CrackME–1.rar.html

http://letitbit.net/download/afe011342552/.NET-Basic-Patching.rar.html

http://letitbit.net/download/274a5d960979/SmartAssembly-Patching.rar.html

http://letitbit.net/download/b47e21734740/SmartAssembly-Patching-2-Advanced-.rar.html

http://letitbit.net/download/267522159367/Managed-Resources–dotNET-Resources-.rar.html

http://letitbit.net/download/7a1de9818675/Memory-Optimization.rar.html

http://letitbit.net/download/755953323647/all-about-.NET.rar.html

http://rapidshare.com/files/141507092/all_about_.NET.rar

2 new MUPs by Joker_Italy August 31, 2008

Posted by reversengineering in MUPS, other protectors and packers.
add a comment

Unpack ModdedFog v 1.1

Unpack lARP Lite Version 2.0

http://letitbit.net/download/71d3f5460557/Unpack-lARP-Lite-Edition-2.0-By-Joker-Italy.rar.html

http://letitbit.net/download/c6e053337673/Unpack-ModdedFogv1.1-by-Joker-Italy.rar.html

M.UpTheMida August 27, 2008

Posted by reversengineering in MUPS, Themida.
1 comment so far

TheBat manual unpack movie by RSI

TheMida minimum protection

language :rus

other file:script

http://letitbit.net/download/c80e9c45995/TheBat-manual-unpack-movie-by-RSI.rar.html

6 new M.Up by Joker-Italy August 27, 2008

Posted by reversengineering in MUPS, other protectors and packers.
add a comment

Unpack Software Compress 1.X + Script

Unpack NtKrnl Secure Suite and EXEStealth 3.16 + Script

Unpack Stealth PE 2.2 + Script

Unpack ElecKey 2.0 – New tut August 2008

Unpack KKrunchy 0.23 + Script

here u go :

http://letitbit.net/download/146f3b992311/Unpack-Stealth-PE-2.2-By-Joker-Italy.rar.html

http://letitbit.net/download/167d9297717/Unpack-Software-Compress–.4-By-joker-Italy.rar.html

http://letitbit.net/download/10847c528006/Unpack-NtKrnlpacker-Secure-Suite-By-Joker-Italy-Script.rar.html

http://letitbit.net/download/0c9f3072488/Unpack-KKrunchy023-by-Joker-Italy.rar.html

http://letitbit.net/download/18f653482004/Unpack-EXEStealth3.16-by-Joker-Italy.rar.html

http://letitbit.net/download/1e523384025/Unpack-ElecKey-2.0-By-Joker-Italy.rar.html

scripts:

http://letitbit.net/download/ed5c3a45094/NTkrnl-Secure-Suite-and-EXEStealth-3-1-.16-OEP-Finder—IAT-Repair—Joker-Italy.txt.html

http://letitbit.net/download/683b7d998818/StealthPE-2-1-.X—OEP-Finder-By-Joker-Italy.txt.html

http://letitbit.net/download/6b77a2250777/Kkrunchy-k7-rel-1-.0.23—OEP-Finder-By-Joker-Italy.txt.html

thanx fly to Joker-Italy

Patch HWID Execryptor 2.4.1 August 23, 2008

Posted by reversengineering in execryptor, MUPS, RCE.
4 comments

Patch HWID Execryptor 2.4.1
[Execryptor 2.4.1 Cracked Unpack.CN]

by Trickyboy

language: vietnamesse

http://letitbit.net/download/94b4e0663716/Patch-HWID-Execryptor-2.4.1.pdf.html

TiGa IDA series August 23, 2008

Posted by reversengineering in MUPS, other protectors and packers, RCE.
add a comment

1-Visual Debugging with IDA – The Interactive Disassembler
2-Remote Debugging with IDA Pro
3-Debugging a faulty application with IDA Pro
4- How to Solve Crackmes for Dummies in Video
1 (Tutorial)
2 (Keygen Generation)

5- x64 Disassembling Primer and fixing obfuscated APIs
6- TLS-CallBacks and preventing debugger detection with IDA Pro
7- Unwrapping a Flash Video Executable (exe2swf)
8- Stop fishing and start keygenning!
1 (Tutorial)
2 (Keygen Generation)

9- Alien Autopsy rev. 2008
10- Unpacking deroko’s x64 UnpackMe
11- Solving pnluck’s x64 CrackMe

http://letitbit.net/download/b7a303144588/TiGa-vid11.zip.html

http://letitbit.net/download/a3dcc8225252/TiGa-vid10.zip.html

http://letitbit.net/download/0b67c3359108/TiGa-vid9.zip.html

http://letitbit.net/download/b37cdf156698/TiGa-vid8.zip.html

http://letitbit.net/download/3e1487657737/TiGa-vid7.zip.html

http://letitbit.net/download/89d475741677/TiGa-vid6.zip.html

http://letitbit.net/download/8b2a51850975/TiGa-vid5.zip.html

http://letitbit.net/download/5522c8421660/TiGa-vid4.zip.html

http://letitbit.net/download/13f2d0737318/TiGa-vid3.zip.html

http://letitbit.net/download/363191840277/TiGa-vid2.zip.html

http://letitbit.net/download/8b247f874427/TiGa-vid1.zip.html