PDA

View Full Version : File unpacking


gdpforion
10-31-2010, 02:32 PM
Hello everybody,
Greetings to all. I have a program which is using some form of packer. I am new so trying and exploring the possibilities. manually finding OEP and ollydump always gave me segmentation fault during reanalysis of dump file, so not doing it correctly, i guess. I tried few automatic tools as well but not able to know what type of protection it is. Help ?
Can somebody point me to know what is the packer i am dealing with and is it possible to unpack it using the generic method of manual dumping and rebuilding imports.
The file is here.
http://www.megaupload.com/?d=7IA4DYWE

Suggestions always opens new doors of possibilities....

ac!d
10-31-2010, 03:37 PM
Protection ID scan:

Scanning -> .\3dcontrol.dll
File Type : 64-Bit Dll (Subsystem : Win GUI / 2), Size : 2125824 (0207000h) Byte(s)
[!] Warning : File is 64 Bit, this os is NOT
[File Heuristics] -> Flag : 00000000000001001100000000000000 (0x0004C000)
[!] LiCENSE - FlexNET v11.7 protected !
[CompilerDetect] -> Visual C++ 8.0 (Visual Studio 2005)
- Scan Took : 0.156 Second(s) [00000009Ch tick(s)]

gdpforion
11-01-2010, 06:28 AM
Thanks ac!d,
Appreciate your response. Yes it is Flexnet licnse appli. But unfortunately i was not able to locate the lc_checkout function. My first doubt goes, is it packed with something. I tried unpacking but invalid.
I am trying to work on it, as it is, but not have enough knowledge about unpacking.
------------------------------------------------------------------------
Note : Thanks Everybody. Target defeated using lc_ckeckout true return.