Unpacked Engine - 22 March 2010

Zoom · 2010-03-22T07:58:13.000Z

Hi. Here's the unpacked version of Engine. http://i.imgur.com/jlnL0.jpg Engine Unpacked EU.zip MD5:cf4711d009732657b0213f4c6bbf4a2c - VirSCAN.org Scanners did not find malware! (http://www.virscan.org/report/82a9d928f993ae2670ba364fca50fa1f.html) VirusTotal - Gratis Online Virus och Malware Scan - Resultat (http://www.virustotal.com/sv/analisis/787c62d85f943b483e05328f523ad9218521f206305bf67eeae00bc5ebca26cf-1269241111)

what it is do?

i cant find its themida pack at my pc xD, even when i open it in a hardcore mode. but with the themida unpacker you can make some nice bypasses + search the l***ient.

Originally Posted by pspiso

i cant find its themida pack at my pc xD, even when i open it in a hardcore mode. but with the themida unpacker you can make some nice bypasses + search the l***ient.

a) this is unpacked, not packed with themida
b) If you want Lt.client addie, open cshell.dll in olly dbg.

Oo. What is this. o-o

yes what to do with this??

Originally Posted by hejsan

a) this is unpacked, not packed with themida
b) If you want Lt.client addie, open cshell.dll in olly dbg.

a) i wanted to try it for my self back then.
b) it doesnt show the Lt client =( in cshell.dll else i would have had the boxes a long time ago. =D

pspiso you probably need a olly undetected or try with the IDA, lt.client is in cshell.dll.

hejsan engine is no more packed, only crypted.

example: ( Found in Engine of Europe using Peid-Kanal v2.92 )

Code:

BLOWFISH [sbox] :: 0037C050 :: 007DD450
BLOWFISH [sbox] :: 0037D098 :: 007DE498
CRC32 [poly] :: 00083560 :: 004E4160
CRC32 [poly] :: 0008356D :: 004E416D
CRC32 [poly] :: 0008357E :: 004E417E
CRC32 [poly] :: 0008358F :: 004E418F
CRC32 [poly] :: 000835A0 :: 004E41A0
CRC32 [poly] :: 000835B1 :: 004E41B1
CRC32 [poly] :: 000835C2 :: 004E41C2
CRC32 [poly] :: 000835D3 :: 004E41D3
MD5 :: 00063740 :: 004C4340
MD5 :: 002BFFFF :: 00720BFF
NOEKEON [long] :: 00323A9B :: 0078489B
PI fraction (NIMBUS / BLOWFISH) :: 0037C008 :: 007DD408
PI fraction (NIMBUS / BLOWFISH) :: 0037D050 :: 007DE450
RIJNDAEL [S] [long] :: 00324AF3 :: 007858F3
RIJNDAEL [S] [long] :: 00324EF2 :: 00785CF2
RIJNDAEL [S] [long] :: 003252F1 :: 007860F1
RIJNDAEL [S] [long] :: 003256F0 :: 007864F0
RIJNDAEL [S-inv] [long] :: 00326AF3 :: 007878F3
RIJNDAEL [S-inv] [long] :: 00326EF2 :: 00787CF2
RIJNDAEL [S-inv] [long] :: 003272F1 :: 007880F1
RIJNDAEL [S-inv] [long] :: 003276F0 :: 007884F0