Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-27-2004, 03:04
hell
 
Posts: n/a
Problem with shrinker 3.4

Ok guys!!!!!! I am a newbie so please help me with this.
I have a target packed with shrinker 3.4. I load it in olly 1.10 trace thru the unpacking routine and reach the oep. I try to dump at the oep using the ollydump plugin but i get an error message saying that cant read memory from 401000 to 401800 where 401000 being the oep. So i cant dump at the oep but i dont get such messages with UPX and Aspack. Is it an antidumping trick or something is wrong with the way i am trying to unpack
Reply With Quote
  #2  
Old 07-27-2004, 04:01
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 98 Times in 96 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Well hell:

Has a clever ring to it, doesn't it. The First thing you should do when you have a reversing problem is GO TO THE SEARCH BUTTON and/or YOUR FAVORITE SEARCH ENGINE and actually seek out answers to your OWN problems. Have you searched here for "shrinker" (without the quotes) or on the net using "shrinker 3.4 unpacking" (again without the quotes). You might then discover that there are a couple of flavors of shrinker unpackers already on the net. (Doh!)

It is also a GOOD IDEA to go to the website of the product maker and read what they have to say about their product. It often gives you GOOD CLUES about problems you might experience. Such as:

"As an added bonus, Shrinker's compression even encrypts computer software to act as an effective protection against decompilers."

Now here's another "mystical statement" you can write on your wall. Encrypted code won't run, the program has to decrypt itself at some point, and at least to some extent, to work at all. Parts might be encrypted and only decrypted if "registered" or a "password" is entered, but, the general program has to decrypt (and unpack) itself to run. Where the code does that can often be discovered and used to decrypt the program for you.

Or if you are too lazy to do your own learning you could find one of the tools for unpacking/decrypting shrinker 3.4 and let it do the work for you. One such, which I found with only a few minutes searching, has an option: "unpack Shrinker 3.4, decrypt", but if you want to "learn," you might want to read some of the may tuts on the net and examine the Tools to see how they did it for you. That's what "learning" is all about.

Regards,
__________________
JMI
Reply With Quote
  #3  
Old 07-28-2004, 01:30
LOUZEW's Avatar
LOUZEW LOUZEW is offline
Friend
 
Join Date: Feb 2002
Location: Britanny
Posts: 101
Rept. Given: 1
Rept. Rcvd 2 Times in 1 Post
Thanks Given: 6
Thanks Rcvd at 7 Times in 7 Posts
LOUZEW Reputation: 2
shrinker 3.4

Hi, hell
What's your system ???? W2k or Xp i Think.
I had this pb a long time ago. Try to unpack it under W98, all will be fine if you really know the unpacking metod !
Reply With Quote
  #4  
Old 07-29-2004, 14:32
hell
 
Posts: n/a
Thanks Louzew!!!!!!!!
but i got a tut. to unpack th protection in xp!!!!!!!!!

If somebody wants the tut(it's in french) just PM me!!!!!!!!

Last edited by hell; 07-29-2004 at 14:51.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Ram problem moro3391 x64 OS 11 05-14-2017 17:17


All times are GMT +8. The time now is 20:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )