[ Home | Contents | Search | Post | Reply | Next | Previous | Up ]
From: PRIVATERS
Category: Community
Date: 14 Jan 2012
Time: 19:27:47 -0800
Remote Name: 188.163.66.213
<IMG>http://i29.fastpic.ru/big/2012/0113/27/e4cc38fc85990bcc2ce618e076f70127.gif</IMG> At last! crack the latest version of XRUMER 7.091 ELITE Why was it so difficult? okay, as everyone wants to know, Xrumer is not .net based. its good old delp, and they use Execrypt (a tool specialy designed to protect Delphi apps) thus is not a big problem YET, its pretty tough to unpack because of code virtualization and a lot anti debugging tricks. After u completed that layer of removing you are left with a "halfway" readable assembler file. now ther is another protection layer, some parts ot the app itself (code) is encrypted with RSA keys and each "license" act as a decryption key.Also the app calls back to the server and checks randomly parts of the apps assembler (tampering detections). and if they are not disabled the license will get banned because of a modified file.if you try to unpack the rsa encrypted parts you have to store them and make your app changed to the decryypted. there is the next tamper detection, it uses timers inside itself to check if the execution flow is still the "same" speed and no interruptions are made. this is nifty cause the timer checks will see it gets "debugged" or even traced (this normaly slows code execution about 100x or more). But we all went around protection! I was lucky enough to get into a closed section of the forum hack because I pay for such access so you use the http://fileups.net/2M69585 to your health! :)
