View Full Version : Unpacking Softwrap just right click!
Teerayoot
July 31st, 2003, 00:07
Olly is a great debugger on the earth.One day after i decide to unpack some softwrap prog that written using VB,fist i try to dump using Ollydump then rebuild using imprec .It don't work .it seem something wrong.After try in and try out for a while ,i got it.he he i never think why unpacking softwrap is too easy for every unpacking that i made before,just fallow this intruction
First after you click try on softwrap dialog,fire up OllyDbg ,Attact process that u want to unpack(normally it's extention .locked )then Right click on Cpu Window ,select copy all ,then copy to executable and Save to unpacked.exe
It's work great.
Yes Just Right click!
BruceLee
July 31st, 2003, 01:00

))) Wonderfull

)))
Tacman
July 31st, 2003, 01:12
whe i try to run the unpacked exe I get and error - xtreamlok alert, dll loading problem or debugger detected or integrity violated. Any advice on how to beat this?
Anonymous
July 31st, 2003, 02:50
mmmhhh, ok, let me see if what I'm following you correctly ...
1) I got UPX and pack notepad.exe with it
2) I start up the packed notepad
3) I attach the running packed notepad with ollydbg
4) I go to the disassembler pane in the CPU window (if necessary I select the correct executable with ALT+e if the packed exe is not show in the disassembler pane) and right click doing copy->select all
5) once all the code is selected I do copy->to file
6) I copy to the file system all the code with an exe extention and run it
7) it should work .... but it doesn't!!!
Did I follow you correctly or not???
With what kind of packer/encrypter did it work for you???
On what operating system are you working on???
JimmyBoy
Anonymous
July 31st, 2003, 05:16
JimmyBoy: It's obviously not going to work on UPX is it?
To unpack UPX (and most other packers/protectors) you need to find OEP and dump there.
Anonymous
July 31st, 2003, 05:30
Hello Anonymous ... obviously what is "obvious" to you may not be so "obvious" to me, don't you think????
If every packer needs finding the OEP and fixing the initial jump, what is Teerayoot talking of unpacking then???????
JimmyBoy
yaa
July 31st, 2003, 06:43
Hello Teerayoot,
what is the extention .locked that you talk about?
Regards,
yaa
Tacman
July 31st, 2003, 08:05
He's talking about the Softwrap protection. The app exe that is protected has the extension .locked
Anonymous
July 31st, 2003, 14:06
Hmmm, how can you do that???
When I try this proggie exit with code 0.
You can unpack but later this dump file is impossible to debug?
Anonymous
July 31st, 2003, 14:20
did you fix pe header after dumping?
BruceLee
July 31st, 2003, 23:51
Hmmm I don't... but hmmm, I'll check that!
Anonymous
August 3rd, 2003, 12:59
It's impossible. Mission Impossible

You may on this way only remove nag. Program is still protected by softwrap and
contains a lot of SMC!!!

Anonymous
August 3rd, 2003, 16:56
"It's impossible. Mission Impossible

"
a 30 sec max job with unpacking softwxxx with 'the other debugger', horses for courses.
Anonymous
August 6th, 2003, 21:07
what is the executable?
Anonymous
August 6th, 2003, 21:27
and where's the unpacked.exe?
TBD
August 6th, 2003, 22:48
this is not an unpacked forum ... so please do not abuse it.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.