Reverse Engineering Team
Unregistered, You must accept the Forum Rules below to be able to use some forum functions.

Read forum rules below...

1. All posts must be written in English.
2. Don't spam/abuse any other member via E-mail or Private Messages.
3. Have phun!

For breaking above rules you may be warned/banned appropriately!

Join the forum, it's quick and easy

Reverse Engineering Team
Unregistered, You must accept the Forum Rules below to be able to use some forum functions.

Read forum rules below...

1. All posts must be written in English.
2. Don't spam/abuse any other member via E-mail or Private Messages.
3. Have phun!

For breaking above rules you may be warned/banned appropriately!
Reverse Engineering Team
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Extract File Advice

3 posters

Go down

Extract File Advice Empty Extract File Advice

Post by dgecko Wed Apr 13, 2022 3:08 am

Hi peoplez. Hope all is well.
Have a request for advice, not much dongle related, but thought I could ask, if not allowed please say.

I have this self-extracting update prog. It looks for previous version of prog, and if found, extracts updated installer exe and you can save it to run install of new version.
To start, and be clear, I'm not looking for crack, just to extract the installer from it for new version.
Problem is, i tried many things and fail Sad
For start, file is upx packed. Tried many unpack methods, either of 2 things then happen. File ends up corrupt, or end with small 500kb file, which is not right, because it looses the exe to extract (~7mb).
Second problem is, using debugger to trick it to see old file, extracts a file with right name, but corrupt. So assuming it has some decryption Sad
Anyone here that would like to assist on this?

dgecko

Posts : 14
Points : 27
Reputation : 3
Join date : 2016-12-20

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by BfoX Wed Apr 13, 2022 4:40 am

so, you need show your stuff

BfoX

Posts : 1218
Points : 1662
Reputation : 307
Join date : 2012-04-18
Location : Earth

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by dgecko Wed Apr 13, 2022 7:22 am

Thanks BfoX, can I pm you file?

dgecko

Posts : 14
Points : 27
Reputation : 3
Join date : 2016-12-20

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by psgama Mon May 16, 2022 4:12 pm

Try windows ProcMon to see where files are being extracted to. May be able to execute from there.

PM program name.

psgama

Posts : 26
Points : 44
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by dgecko Tue May 17, 2022 9:21 am

Thanks psgama, I've send you the files I have + some writeup of my current findings and things I've tried. Appreciate your time looking at it.

dgecko

Posts : 14
Points : 27
Reputation : 3
Join date : 2016-12-20

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by psgama Tue May 17, 2022 12:34 pm

Looks like the Program is Checking PMService.exe for some data and using it as key to decrypt the new installer.
I get the installer to extract the new install setup file but is garbage as well.

psgama

Posts : 26
Points : 44
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Extract File Advice Empty Re: Extract File Advice

Post by Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum