[Release] Unpack dekaron.exe [Flash-Tutorial]

Hi.

A lot of people have lately been asking on how to unpack dekaron.exe . Some found my written mini-tutorial but didn't understand it and some didn't even find it. So I decided to make a Flash-tutorial on how to unpack the dekaron.exe of 2moons with OllyDbg 1.10 .

Tools needed:

- OllyDbg 1.10
- ImpREC
- LordPE or some other process memory dumper

I didn't make a unpack script for it because I think they're only meant to be used once you understand how to do it manually (just to save time).

Appreciate comments :)...

very useful for everybody in general, thank you

Awesome tutorial, thanks!

yaaay thank you
I was one of those many people that asked you for help
before I asked you, I was trying to unpack it for almost 4 hours with an old script that didn't even work. lol

edit: I did it and now I have my dekaron_unpacked_4.6.33.exe
thanks again

Np. Glad that this tutorial is useful :).

Whats the point of unpacking it though? doesn't it work fine with the "packed" version?

i dont know if i should do this, but the last post was 3~4 months ago
#reported for bumping welcome to the forums

Its fine I think because it's not like he intentionally bumped the thread. He is probably new here and just trying to understand things, so questions come up which is natural.

Quote:

Originally Posted by flick360 Whats the point of unpacking it though? doesn't it work fine with the "packed" version?

There is just more things you can do with unpacked dekaron...and all the bypasses work with "packed" version if that's what you are asking.

Thanks a lot for this tut, btw your olly colors are atrocious

Quote:

Originally Posted by ind3siszive Thanks a lot for this tut, btw your olly colors are atrocious

This tutorial doesn't work anymore...

Use the newer one. I've linked to it in my unpacked dekaron.exe release topic.

lol ind3siszive u didn't readead the alst post right ? -.-''

yay 1,000 post xD

Mod, lock this thread, I won't update it anymore as it was for an old packer. Thanks :)...

#closed