APPZXOR
Hello and welcome to APPZXOR,

We would appreciate if you register so you can enjoy
the full benefits of browsing, viewing and using our forum.
Here are some features:

• Create threads;
• Reply to threads;
• View links & images;
• Leave positive or negative feedback to a member.

What are you waiting for? Go ahead and register!
It's free, quick and easy!


Where Applications Become AppZ. Join Us Now!
 
HomePortalFAQSearchMemberlistRegisterLog in
Search
 
 

Display results as :
 
Rechercher Advanced Search
Latest topics
» [COC] Clash of Clans
by D'ShadowZRay Thu Jan 28, 2016 12:10 am

» iam new
by D'ShadowZRay Thu Jan 28, 2016 12:06 am

» Guess who's back!
by D'ShadowZRay Thu Jan 28, 2016 12:03 am

» I need some help
by akumasan_01 Fri May 01, 2015 1:25 pm

» HELLO GUYS! :))
by Appz-RhastaSix Fri Sep 19, 2014 9:14 am

» Visual C# Programming Basics
by Appz-RhastaSix Wed Sep 10, 2014 9:03 am

» Old Game!
by iRegen Tue May 13, 2014 12:28 am

» Hai guys gud to be back again!
by janklaw Tue Apr 01, 2014 6:26 am

» Happy to be Back
by janklaw Tue Apr 01, 2014 6:24 am


Top posters
[Detheroc_93]
 
MrStar
 
kurosakinaruto
 
GreyPhantom
 
ShadowSonic
 
Appzwesley29
 
z_f
 
MasterGandeo
 
[νєχ338]
 
wafumon
 

Share | 
 

 Basic Decryption Tutorial

View previous topic View next topic Go down 
AuthorMessage
Gk-[invisible]
Super Member

avatar

Posts : 100
Join date : 2012-01-09
Age : 25
Location : philippines and germany

PostSubject: Basic Decryption Tutorial   Mon Jan 23, 2012 5:18 am

Required : OllyDBG, unpacked runnable, clean MRS.exe

IF IT DOESNT WORK FOR YOU, DON'T BLAME ME.

Step 1


1.Run OllyDBG.exe and open the client you wish to decrypt's unpacked runnable.
2.Hit Ctrl + G and type in 00538691 and hit OK.
It will look like this

Code:
MOV AL,BYTE PTR DS:[ECX]
NOP
NOP
NOP
NOP
NOP
NOP
MOV BYTE PTR DS:[ECX],AL
INC ECX
DEC ESI
JNZ SHORT thedueli.00538691

Using Zephyr's MRS custom encryption method, the decryption code should look like this :

Code:
MOV AL,BYTE PTR DS:[ECX]
ROR AL,X                                // X = 1-7
XOR AL,X                                // X = 1-255
ADD AL,X                                // X = 1-255
XOR AL,X                                // X = 1-255
SUB AL,X                                // X = 1-255
NOP
MOV BYTE PTR DS:[ECX],AL
INC ECX
DEC ESI
JNZ SHORT thedueli.00538691


Okay. We're done here. Leave OllyDBG's window open with the code above.

Step 2

1.Open up MRS.exe in a different OllyDBG window.
2.Hit CTRL + G and type in 00401100 and hit OK.
Result should look like this :

Code:
MOV AL,BYTE PTR DS:[ECX+ESI]
MOV DL,AL
SHR DL,3
SHL AL,5
OR DL,AL
INC ECX
NOT DL
MOV BYTE PTR DS:[ECX+ESI-1],DL
CMP ECX,EDI
JB SHORT mrs2.00401100

3. NOP everything starting from MOV DL,AL to INC ECX, and NOT DL.
4. Change MOV BYTE PTR DS:[ECX+ESI-1],DL to MOV BYTE PTR DS:[ECX+ESI-1],AL
5. Move INC ECX a byte further.
If you have done everything above, it should look like this :

Code:
MOV AL,BYTE PTR DS:[ECX+ESI]
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
INC ECX
NOP
MOV BYTE PTR DS:[ECX+ESI-1],AL
CMP ECX,EDI
JB SHORT mrs2.00401100

Great.
Leave this OllyDBG window open.


Step 3


1.Go to your unpacked runnable opened by OllyDBG on first step.
2.Hit Ctrl + G and type in 00538693 and press OK.
3.Right click that address. You'll get a menu. Select
Binary > Binary Copy.
4.Go to your opened OllyDBG window containing our modded MRS.exe.
5.Hit Ctrl + G and type in 00401103 and press OK.
6.Hit Ctrl + E, uncheck Keep size, and go to HEX +00.
7.Delete everything on HEX +00, and hit Shift + Insert.
8.Press OK.
9.Right click any address, select Copy to Executable > All Modifications. Hit Copy All.
A new window should appear.
Right click any address on the new window, and select Save File.
name your file and save it.

Congrats! You now have your MRS.exe ready for decompiling.

Back to top Go down
megan
Moderator
Moderator

avatar

Posts : 361
Join date : 2011-04-20

PostSubject: Re: Basic Decryption Tutorial   Mon Jan 23, 2012 6:28 am

are these also working on encrypted swf files?




Just a friendly reminder: Whenever i "locked" a topic/s, i give 3 more days for the topic to be in public before i dump it.

[You must be registered and logged in to see this image.]

Warning List : acechixins, gedebuk
Back to top Go down
GreyPhantom
Administrator
Administrator

avatar

Posts : 3055
Join date : 2011-04-19
Age : 21
Location : Place Of Geeks

PostSubject: Re: Basic Decryption Tutorial   Mon Jan 23, 2012 7:13 am

Hmf... Give me the Download Links Of The Required Tools!





Don't Forget To Give " + " or " Thanks " If I Helped.
[You must be registered and logged in to see this image.][You must be registered and logged in to see this image.][You must be registered and logged in to see this image.][You must be registered and logged in to see this image.]
[You must be registered and logged in to see this image.]
[You must be registered and logged in to see this image.]
[You must be registered and logged in to see this image.]

Be Anonymous.
Back to top Go down
iRegen
Junior Member

avatar

Posts : 19
Join date : 2012-02-01
Location : Hell

PostSubject: Re: Basic Decryption Tutorial   Fri Apr 20, 2012 7:13 am

NICE
Back to top Go down
Sponsored content





PostSubject: Re: Basic Decryption Tutorial   

Back to top Go down
 

Basic Decryption Tutorial

View previous topic View next topic Back to top 

 Similar topics

-
» What are the basic requirements for using Selenium IDE?
» Selenium tutorials for beginners/newbie
» Social Engineering Tutorial
» [ANSWERED] Integrate drivers tutorial
» Selenium Webdriver Tutorial with Practice Exercises
Page 1 of 1

Permissions in this forum:You cannot reply to topics in this forum
APPZXOR :: Discussions :: Tricks & Tutorials-
Free forum | © phpBB | Free forum support | Contact | Report an abuse | Free forum