C-Flyff Unpacked neuz.exe
Well, I remember someone saying a couple weeks back if they had an unpacked C-Flyff neuz.exe that they may be able to help some toward finding out how to properly extract the rest of the wdf files, but not positive on who it was now though. It may have been Xadet, but even if it was him, he may have already gotten ahold of one by now, or may be too busy with his paid work to even have time to mess around with it right now.
But here it is anyway just in case. I was messing around some last night and ended up getting it unpacked. Packed with Themida too lol, which I didn't know till last night. Pretty sure it's unpacked properly, but if anyone finds out differently do please let me know, as I'm by far no expert in that field.
Re: C-Flyff Unpacked neuz.exe
Re: C-Flyff Unpacked neuz.exe
Quote:
Originally Posted by
ClownOfValetine
it was Xaget
You mean Xadet? :P
Re: C-Flyff Unpacked neuz.exe
Re: C-Flyff Unpacked neuz.exe
Quote:
Originally Posted by
ClownOfValetine
it was Xaget
Still more retarded than ever.
>>;
Anyways, Themida?
What version?
Re: C-Flyff Unpacked neuz.exe
Quote:
Originally Posted by
Organic
Still more retarded than ever.
>>;
Anyways, Themida?
What version?
It was packed with Themida 1.8.4.0 to be exact. Because originally, I ran a PEiD scan on it and it wasn't showing the Themida protection, or anything ELSE for that matter, at all. Then I realized I'd not checked for updates anytime lately, so I just used ExEinfo PE instead until I could get some updated signatures. Then after I got it unpacked I did a hardcore scan again with a slightly updated PEiD and am pretty sure I remember it showing a Themida detection again, but only under extra information. But I dun remember for SURE now, as I was prettty toasted last night lol.
So I did a final update to a 7k+ signature userdb with PEiD then it only showed Microsoft Visual C++ 6.0. Several other PE scanners gave basically the same result. Only thing left really showing now to my knowledge is a couple MS Crypto API Signatures, a CRC32 sig, a RIJNDAEL sig, and a ZLib sig. So that's the only thing I'm not sure about really at this point is those 5 sigs, as once again, I'm really only a beginner in this area and my knowledge is still quite limited.
Re: C-Flyff Unpacked neuz.exe
hmm sounds suspicious, but thanks for the link !!! it helped alot :D
