What's new
RevTeam.Re - Reverse Engineering Team

Welcome Guest! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox! Register and wait for our approve!

DotFix NiceProtect 6.4 Unpack Ders

Unlimited

Moderator
Staff member
Joined
Sep 11, 2021
Messages
286
Reaction score
2,733
Merhaba arkadaşlar forumda paylaştığım DotFix NiceProtect 6.4 için unpack dersi videosu hazırladım.
Videodaki asıl anlatmak istediğim stack yönteminin işe yaramadığı yerde memory yöntemini nasıl kullanabilirizdir.
 

Unlimited

Moderator
Staff member
Joined
Sep 11, 2021
Messages
286
Reaction score
2,733
Please, Log in to view quote content!
Yup but if OEP stolen byte enabled fix OEP else do not work program.
Also video content memory method show how to unpack program with memory technique.
DotFix all versions not corrupt IAT for information.
 
Last edited:
P

p4r4d0x

Guest
Please, Log in to view quote content!
Your technique brother will not work!
Why : first When u pack something with DotFix that is trial (that u made with loader ) because is not full will popup a msg that is protected and then will send u right to the Code section!

In case the Dotfix was FULL and not trial will not show u any popups and will not send u to the code section!

The other thing is that the application that u use is small in bytes . doesnt have any major impack on the encryption!

In case im wrong u can use ur technique with Vb_decompiler (which is full DotFix) will not work No matter what u will do!!
 

Unlimited

Moderator
Staff member
Joined
Sep 11, 2021
Messages
286
Reaction score
2,733
@p4r4d0x misunderstand bro.
yes trial vuln messagebox but other version unpack technique same.
important when code section decrypted put breakpoint and run but right code section ;)
If you watched other dotfix version unpacking technique you will see.
Also vb decompiler not protect dotfix maybe old version but always programmer use the mida :)
For information.
 
Top