RE-Max v2.0 unpacker for MaxToCode v3.2x

[bigmouse]

fixed bug in listing assembly files.
[+]support for maxtocode professional v3.2x

RE-MaxV2.0.rar (138.30 kB)
Download Link: http://www.filesend.net/download.php?f=39da91b9447a33ce5577dbe7d224ffd5
this is *only* the upgrade file.

RE-Max v1.0 is needed , Download Link:

RE-Max_v1.0.rar (15.17 MB)
http://www.filesend.net/download.php?f=92e5de1349125c941421f918bbd23f94

[LibX]

Very nice work keep up the good work!

Regards,
LibX // RETeam

[slan008]

fixed bug in listing assembly files.
[+]support for maxtocode professional v3.2x

RE-MaxV2.0.rar (138.30 kB)
Download Link: http://www.filesend.net/download.php?f=39da91b9447a33ce5577dbe7d224ffd5


below is use Maxtocode 3.2x retail packed file, but i have no Maxtocode 3.2x retail version, these file will help your Re-Max work well. the runtime file in the zip and name is *.Security.dll.
http://rapidshare.com/files/54133107/Maxtocode_3.21_test.rar.html

[UFO-Pu55y]

@bigmouse:
Impressive work ! Keep on :)

After dump, the file can not run and can no be viewed in Reflector. But the IL Code was already in dumped file.
When Reflector's not able to fire something up, just look
what it says. Usually it's telling, why it can't open it.
I've tested it on an UnpackMe right now.
After dumping Reflector only says: "GUID heap has invalid size."
Ok there, so I fixed the GUID size with CFF (from 0x15 to 0x10) -
and after that it opened up fine in Reflector.
Therefor it still won't run, since MaxtoCode's startup stuff is still
present at Entry Point... and the original Entry Point code's lost :/

use ildasm decompile and ilasm compile the ilAnd therefor this also wouldn't help... :/

[tankaiha]

bigmouse did an amazing job, great work!
Now hope for the static unpacker from Libx.

To UFO-Po55Y, sometimes, unpack it then ildasm+ilasm does work.
Of coz, sometimes not work.

[jacky]

that's does not work for me.

when progress at 90% , it stoped grow, and the unpacker eat my cpu at 99%

[ricker]

en,it looks like not work very well,it can not unpack maxtocode 3.2x

[bigmouse]

@jacky
i'm sorry, for some name obfuscated assembly, if the name is obfuscated with unprintable chars maybe have this problem.
i'll fixed this.

@ricker
what's the problem with you?

some times, it can not full unpack maxtocode 3.2x, leave a little methods unpacked.
i'm looking for the problem.

[rick]

en,it looks like not work very well,it can not unpack maxtocode 3.2x

who are you? chinese?

[ricker]

@jacky
i'm sorry, for some name obfuscated assembly, if the name is obfuscated with unprintable chars maybe have this problem.
i'll fixed this.

@ricker
what's the problem with you?

some times, it can not full unpack maxtocode 3.2x, leave a little methods unpacked.
i'm looking for the problem.
hope maxtocode unpacker will be much better

[snowboy]

BigMouse I have tested it,SomeTimes Only a litte Methods can be unpacked but Most methods can not be unpacked:)

[wickyhu]

Hi,

I tried to use your RE-MAX v2.0 to unpack this MaxtoCode protected software FundsDetail.exe ( http://soft.honpher.cn/fuxing36.rar).

At around 50% error occured "An unhandled win32 exception occurred in RE-MaxV2.0.exe [####]". The version of runtime dll asist.dll is 3.3.0.3.

Could you help to take a look?

Thanks
Wicky

[ricker]

BigMouse Can you tell us how to dump it in the real Environment:rolleyes: Maybe it can full dump it.