2Moons Data Unpacker

Quote:

Originally Posted by Asksony Here is a much better and simpler unpacker, it automatically does everything for you. Just place it in your 2moons data folder and run it.

Quote:

Originally Posted by CrystalMaiden Yeah i have that too but i thought the creator don't want to share it any more? :p

Quote:

Originally Posted by Asksony Here is a much better and simpler unpacker, it automatically does everything for you. Just place it in your 2moons data folder and run it.

Quote:

Originally Posted by Asksony Here is a much better and simpler unpacker, it automatically does everything for you. Just place it in your 2moons data folder and run it.

Quote:

Originally Posted by CrystalMaiden I see a lot of people looking for 2Moons Data Unpacker for Expedition. I'm not sure why it's not in the release section. If anything wrong please close my thread. I got this sometimes ago from a friend, so share with those who need it.

/* Derakon Unpacking Script - CoCaKoLa [09.01.2008] */

msgyn "Alt+O -> Disable all exceptions"
cmp , 0
je retry

dbh

var a
var b
var c
var d
var e
var test
var rva

run
eoe checkme
eob checkme

checkme:
mov b,eip
add b,2
mov b,[b]
cmp b,00058F64
je checklast
esto

checklast:
mov a,ebp
sub a,10
mov a,[a]
cmp a,400000
je found
esto

found:
eob end
eoe end
mov c,[40003C]
add c,100
add c,400000
mov c,[c]
bprm 401000,c
esto

end:
mov a,[eip]
and a,0000FF
cmp a,C3
jne exit
mov test,[esp]
and test,F00000
shr test,14
cmp test,9
jae loop
jmp exit

loop:
eob exit
eoe exit
esto

exit:
sti
mov d,eip
sub d,9
mov eip,d
mov e,[ebp-8]
mov [eip],e
mov d,eip
sub d,1
mov eip,d
mov [eip],#68#
mov d,eip
sub d,2
mov eip,d
mov [eip],#6A60#
dpe "dump.exe",eip
cmt eip,"OEP! Stolen bytes fixed & dumped. Fix IAT with ImpREC!"
mov rva,eip
sub rva,400000
log rva,"RVA of OEP: "
ret

retry:
ret

Quote:

Originally Posted by xCoCaKoLax Code: /* Derakon Unpacking Script - CoCaKoLa [09.01.2008] */ msgyn "Alt+O -> Disable all exceptions" cmp , 0 je retry dbh var a var b var c var d var e var test var rva run eoe checkme eob checkme checkme: mov b,eip add b,2 mov b,[b] cmp b,00058F64 je checklast esto checklast: mov a,ebp sub a,10 mov a,[a] cmp a,400000 je found esto found: eob end eoe end mov c,[40003C] add c,100 add c,400000 mov c,[c] bprm 401000,c esto end: mov a,[eip] and a,0000FF cmp a,C3 jne exit mov test,[esp] and test,F00000 shr test,14 cmp test,9 jae loop jmp exit loop: eob exit eoe exit esto exit: sti mov d,eip sub d,9 mov eip,d mov e,[ebp-8] mov [eip],e mov d,eip sub d,1 mov eip,d mov [eip],#68# mov d,eip sub d,2 mov eip,d mov [eip],#6A60# dpe "dump.exe",eip cmt eip,"OEP! Stolen bytes fixed & dumped. Fix IAT with ImpREC!" mov rva,eip sub rva,400000 log rva,"RVA of OEP: " ret retry: ret public relased ; /* Derakon Unpacking Script - CoCaKoLa [09.01.2008] */ well ; hi folows =] have fun ; sunbeam dedicated :pimp:=D relasing methods UG chinesse/koreans forums [Only registered and activated users can see links. Click Here To Register...]