locosta wrote:thanks!at first.
Have you had a video guide for another upx decompress methode as below:
000003d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000003e0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000003f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
thanks again.
torsten.schmitz wrote:Always check 0x3e0h and change to be :
000003d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000003e0h: 55 50 58 21 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000003f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
locosta wrote:thanks torsten.schmitz
after change 0x3e0h but still cant unpack it
the following I have modified:
[Please Register or Login to download file]
00000210h: 00 00 00 00 00 00 00 00 55 50 58 30 00 00 00 00 ; ........UPX0....
00000220h: 00 40 30 00 00 10 00 00 00 00 00 00 00 00 00 00 ; .@0.............
00000230h: 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 E0 ;.............?
00000240h: 55 50 58 31 00 00 00 00 00 A8 0C 00 00 50 30 00 ; UPX1.....?..P0.
00000250h: 00 A8 0C 00 00 04 00 00 00 00 00 00 00 00 00 00 ; .?.............
00000260h: 00 00 00 00 40 00 00 E0 55 50 58 32 00 00 00 00 ; ....@..豥PX2....
00000270h: 00 02 00 00 00 00 3D 00 00 02 00 00 00 AC 0C 00 ; ......=......?.
00000280h: 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 ; ............@..@
00000290h: 2E 72 73 72 63 00 00 00 00 3E 00 00 00 10 3D 00 ; .rsrc....>....=.
000002a0h: 00 3E 00 00 00 AE 0C 00 00 00 00 00 00 00 00 00 ; .>...?.........
000002b0h: 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 ; ....@..@........
000002c0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000002d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000002e0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000002f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
00000300h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
00000310h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
00000320h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
00000330h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
00000340h: 00 00 00 0A 00 24 49 6E 66 6F 3A 20 54 68 69 73 ; .....$Info: This
00000350h: 20 66 69 6C 65 20 69 73 20 70 61 63 6B 65 64 20 ; file is packed
00000360h: 77 69 74 68 20 74 68 65 20 55 50 58 20 65 78 65 ; with the UPX exe
00000370h: 63 75 74 61 62 6C 65 20 70 61 63 6B 65 72 20 68 ; cutable packer h
00000380h: 74 74 70 3A 2F 2F 75 70 78 2E 73 66 2E 6E 65 74 ; ttp://upx.sf.net
00000390h: 20 24 0A 00 24 49 64 3A 20 55 50 58 20 33 2E 30 ; $..$Id: UPX 3.0
000003a0h: 34 20 43 6F 70 79 72 69 67 68 74 20 28 43 29 20 ; 4 Copyright (C)
000003b0h: 31 39 39 36 2D 32 30 30 39 20 74 68 65 20 55 50 ; 1996-2009 the UP
000003c0h: 58 20 54 65 61 6D 2E 20 41 6C 6C 20 52 69 67 68 ; X Team. All Righ
000003d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
000003e0h: 55 50 58 21 00 00 00 00 00 00 00 00 00 00 00 00 ; UPX!............
000003f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ; ................
artfull wrote:Yeah.....!!!
That's new unpacking method that M3 release start from April 2010. They delete all header info.
Send your exe here and we will help you but Don't have any tutorial so far....
tiuniama wrote:For this UPX decompress and compress data and checksum been deleted, I think can try to hack the UPX.exe make it get pass the UPX error like Header corrupted Error or Checksum Error. I think M3 also waiting the Tutorial, then they will think again changing other method to protect, for Example: Vietnam Papago.exe, now not using UPX to pack, but using PPC protect program. if you want to have a look vietnam papago.exe protect by PPC protect, you may downloat here [Please Register or Login to download file]
tiuniama wrote:For this UPX decompress and compress data and checksum been deleted, I think can try to hack the UPX.exe make it get pass the UPX error like Header corrupted Error or Checksum Error. I think M3 also waiting the Tutorial, then they will think again changing other method to protect, for Example: Vietnam Papago.exe, now not using UPX to pack, but using PPC protect program. if you want to have a look vietnam papago.exe protect by PPC protect, you may downloat here [Please Register or Login to download file]
Kiva87 wrote:Hi, can anyone help me?
I'm trying to change the com port and baud rate, but i keep getting failed...
I'm using papago x5se for 3.5", and my device uses com 2, baud 4800...
I tried to unpack it with upx, but it said:
file is possibly modified etc...
thanks before
Users browsing this forum: No registered users and 2 guests