grawr

01/31/2012 19:42 Bakaneko=O#1
-=[ ProtectionID v0.6.4.0 JULY]=-
(c) 2003-2010 CDKiLLER & TippeX
Build 07/08/10-17:57:05
Ready...
Scanning -> C:\Nexon\Mabinogi\Client.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 8546558 (08268FEh) Byte(s)
-> File has 69886 (0110FEh) bytes of appended data starting at offset 0815800h
[File Heuristics] -> Flag : 00000000000001001100000000110111 (0x0004C037)
[!] Themida v2.0.1.0 - v2.1.2.0 (or newer) detected !
[i] Hide PE Scanner Option used
- Scan Took : 0.313 Second(s)
:rtfm:
01/31/2012 19:49 music123#2
In short : Pake is dead to the public. Good riddance.
02/01/2012 01:09 XxKillomaticxX#3
Themida.... they had to go there didn't they?
02/01/2012 01:13 Alwaho#4
naww, they didnt. You can still get around it... It is a nice attempt to block out some (including me at the moment) doing research atm x3. Decrypting aint my thing but meh
02/01/2012 07:05 jas161#5
Quote:
Originally Posted by Bakaneko=O View Post
-=[ ProtectionID v0.6.4.0 JULY]=-
(c) 2003-2010 CDKiLLER & TippeX
Build 07/08/10-17:57:05
Ready...
Scanning -> C:\Nexon\Mabinogi\Client.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 8546558 (08268FEh) Byte(s)
-> File has 69886 (0110FEh) bytes of appended data starting at offset 0815800h
[File Heuristics] -> Flag : 00000000000001001100000000110111 (0x0004C037)
[!] Themida v2.0.1.0 - v2.1.2.0 (or newer) detected !
[i] Hide PE Scanner Option used
- Scan Took : 0.313 Second(s)
:rtfm:
LOL bb newbs.
02/01/2012 08:05 Kisuna#6
Quote:
Originally Posted by jas161 View Post
LOL bb newbs.
I don't like when people talk trash on you jas but I hate it even more when you're the one that is hard on yourself. Faggot.
02/01/2012 08:23 kcy1019#7
Pleione.dll is packed with themida for some years.
but we can analyze that.
Likewise, we can anlalyze the packed client.exe.
(but if themida's CRC check is enabled, that'll make some problem..)
02/01/2012 12:47 kotarou3#8
Pleione was never packed with Themida. Never. The most "packing" it ever have been to is simply destroying the IAT and restoring imports at runtime.
02/01/2012 13:26 fenrir2037#9
Quote:
Originally Posted by kotarou3 View Post
Pleione was never packed with Themida. Never. The most "packing" it ever have been to is simply destroying the IAT and restoring imports at runtime.
The people who make crap up........ lulz. QFT though.

@Alwaho
It's most. Not some.
02/01/2012 14:22 Akuhura#10
Quote:
Originally Posted by kotarou3 View Post
Pleione was never packed with Themida. Never. The most "packing" it ever have been to is simply destroying the IAT and restoring imports at runtime.
Since when does that qualify as not being packed?
02/02/2012 06:37 kotarou3#11
Quote:
Originally Posted by Akuhura View Post
Since when does that qualify as not being packed?
I said that it wasn't packed with Themida. I never said it wasn't packed at all :P
02/03/2012 09:57 kcy1019#12
Thank you for correcting my miaunderstanding!
Because of the themida titled message I misunderatood