[Release] Unpack GlobalDekaron dekaron.exe [Tutorial]

[Apocalisse]

I think Spaz might be right.

I'm trying to follow your tut too, but i'm having same problems.

I just:

1. setup odbg/phantom options [OK]
2. search for expression ZwContinue [OK]
3. put a hardware breakpoint on the system call [OK]
4. run ONCE, 'cause if i run TWICE it terminates [1/2 OK]
5. remove hardware breakpoint [OK]
6. see as i have this situation:



... pretty much different than yours...

[KO]

7. search for address 00c9341d [OK]
8. locate these "tut familiar" strings:



[1/2 OK]

9. set INT3 brakpoint on "jmp short dekaron.00c933dc" string [OK]
10. run&goddamncrash [Kfuckin'O]

This is my 3rd consecutive day trying to figure something out without asking questions.

PLUS: stealing time to a good f**k.

So, please... any advice?

[Spazman6117]

\offtopic

Sorry for an unrelated question to the thread but i didnt wanna start a new post for a simple question.

Q. What is 99 as a hex value? in the form of 00000000? i tried 10411041

Seeing how 00 00 10 41 = 9. I thought removing the spaces and putting 10411041, that it would = 99 but doesnt.

Can anyone help me out with the A.?

/offtopic

\ontopic

I've given up on unpacking this cause like so many have already said Hell....You need to make this tut with the same look and plug-ins we have....pretty much standard settings, not your fancy stuff. It may be a bit more clearer on what needs to be done. Also you try unpacking a standard dekaron.exe file with just the files you uploaded and let us know if your hardware breakpoints work.

Because with the newest OllyDBG and your plug-ins and the standard OllyDBG look it's NOT working.

Peace,

~Spaz~

[Bleander]

Decimal= 00000099
Binary = 01100011
Hexa = 63

And this tool can help u out to -->

[Spazman6117]

Thx heaps Bleander

When ever i used my calculator i kept getting 10011001,

Thx for that

[Bleander]

Reported.

[EmoPotion]

pass (._.)??

[Bleander]

Originally Posted by EmoPotion

pass (._.)??

just remove the spaces from password and it will work.

w w w . elitepvpers . de

[johnmayer]

does this method able to unpack dekaron exe from core dekarom? i tried, but looks like the code are different. any help?

[HellSpider]

Originally Posted by johnmayer

does this method able to unpack dekaron exe from core dekarom? i tried, but looks like the code are different. any help?

If you're talking about Core-Games Dekaron, yes it's completely different. This protection only applies to Global Dekaron.

[Action10]

someone here understand unpack dekaron.exe global
can help

[emdee29]

if there someone can unpack the packed dekaron.exe pm me willing to pay!

[HellSpider]

Since this old thread was bumped again, just for information, this tutorial is obsolete. Dekaron executables have not been packed using this protector for approximately 10 years. This thread should be closed.