hi everybody,

first sorry for my english... can you unpack for me vagcom v4 and vag-com v7 ? because i'm a noob in manual unpacking and tutorial for pc-guard in french not found :s


file: xxxx://rapidshare.de/files/38085149/vcppcg.rar.html
password of rar is: vagpacked

protected: pc-guard 5

thanks

| Сообщение посчитали полезным:

he work with ida and olly but not with w32dasm .... i know that ida and olly are better than w32dasm but i have always use it .... can anyone help me please?

| Сообщение посчитали полезным:

VM not with w32dasm

| Сообщение посчитали полезным:

Pavka, can you please unpack the english version of this software?
www.ross-tech.com/vag-com/download/current.html

| Сообщение посчитали полезным:

driver73
rapidshare.com/files/102736065/vagcomU.rar

| Сообщение посчитали полезным:

Thank you for quick response!
But in the unpacked file I see many encrypted code blocks
for example:
0040C80D
0040D723
00419079
...
Can you decrypt these code blocks?

| Сообщение посчитали полезным:

00A0FB69 68 16A49F00 PUSH vagcomU_.009FA416
00A0FB6E ^ E9 6D57FEFF JMP vagcomU_.009F52E0
00A0FB73 68 90BD9F00 PUSH vagcomU_.009FBD90
00A0FB78 ^ E9 6357FEFF JMP vagcomU_.009F52E0
00A0FB7D 68 A2D99F00 PUSH vagcomU_.009FD9A2
00A0FB82 ^ E9 5957FEFF JMP vagcomU_.009F52E0
00A0FB87 68 CFE39F00 PUSH vagcomU_.009FE3CF
00A0FB8C ^ E9 4F57FEFF JMP vagcomU_.009F52E0
00A0FB91 68 24F39F00 PUSH vagcomU_.009FF324
00A0FB96 ^ E9 4557FEFF JMP vagcomU_.009F52E0
00A0FB9B 68 DF46A000 PUSH vagcomU_.00A046DF
00A0FBA0 ^ E9 3B57FEFF JMP vagcomU_.009F52E0
00A0FBA5 68 0B4EA000 PUSH vagcomU_.00A04E0B
00A0FBAA ^ E9 3157FEFF JMP vagcomU_.009F52E0
00A0FBAF 68 7171A000 PUSH vagcomU_.00A07171
00A0FBB4 ^ E9 2757FEFF JMP vagcomU_.009F52E0
00A0FBB9 68 657FA000 PUSH vagcomU_.00A07F65
00A0FBBE ^ E9 1D57FEFF JMP vagcomU_.009F52E0
00A0FBC3 68 5CC5A000 PUSH vagcomU_.00A0C55C
00A0FBC8 ^ E9 1357FEFF JMP vagcomU_.009F52E0
00A0FBCD 68 ABC7A000 PUSH vagcomU_.00A0C7AB
00A0FBD2 ^ E9 0957FEFF JMP vagcomU_.009F52E0
00A0FBD7 68 20D5A000 PUSH vagcomU_.00A0D520
00A0FBDC ^ E9 FF56FEFF JMP vagcomU_.009F52E0
00A0FBE1 68 BCE8A000 PUSH vagcomU_.00A0E8BC
00A0FBE6 ^ E9 F556FEFF JMP vagcomU_.009F52E0

| Сообщение посчитали полезным:

O ... this is exact decrypting proc.
But I have not so high cracking skill
I want get working exe with already decrypted code.
Is it possible?

| Сообщение посчитали полезным:

driver73 ?????:
I want get working exe with already decrypted code.
Is it possible?
Probably Try..

| Сообщение посчитали полезным:

I need complete unpacked exe.
Please contact me pm if anybody can help.

| Сообщение посчитали полезным:

driver73
File complete unpacked

| Сообщение посчитали полезным:

OK. I need complete decrypted exe
this file has about 40 encrypted code blocks.
I need exe with decrypted code blocks.

| Сообщение посчитали полезным:

misterfr hi help me plase with unpack vag 805.0and 805.1 ?

| Сообщение посчитали полезным:

Hi everybody
I have few questions, bad_guy said to ask You ppl..

I tried to translate this soft (same thing "misterfr" wants) but when i try to run it/save it I get message/warning/error that "Image" is changed, afterward .exe is unusable. Even if i change single char.
I tried about 200Mb of different software to bypass this but none worked
Also i have 3 different version unpacked same problem on all of them.


I want Santa Claus to give me solution for this, I give up from chicks You can have them

| Сообщение посчитали полезным:

nerko
.rsrc section in .exe should be last section

| Сообщение посчитали полезным:

Its working

| Сообщение посчитали полезным:

Hi, I got new problems
Seems like I need to decompile VM... any directions how can nob like me do that anybody?

| Сообщение посчитали полезным:

Hi, anybody can point me 'how to decode' "codes.dat" file (from same software)?
Contest looks like this:

000000 Ňž÷餔†ۑ˙Ěç
000001 ¶Ň©óŢŽ ®Î‘şŠÜň™şźŢ
000002 ý÷éÇËŢú‘ŚŠ‘đŻÝúą˜ůχ҄ďŮÔ
000003 ·ŃÖÜÜŕé”îňŚČś€



thanks

| Сообщение посчитали полезным:

Anybody willing to do it for some cash? #17 and #18

| Сообщение посчитали полезным:

nobody?

| Сообщение посчитали полезным:

codes.dat decryption is my homework for now... I'll keep you informed.

| Сообщение посчитали полезным:

Good day, ppl

can u please unpack lastest beta release vag-com software pc-guard-5.xx packed.

url:
temp.ross-tech.com/VCDS/download/B812/VCDS-Beta-8121-Installer.exe (file: VCDS.exe)


i'm try unpack it for ollydbg with posted scripts and don't get any results

| Сообщение посчитали полезным:

Please help me with tool unpacking and packing the file codes.dat VCDS 10.6. I want to translate it.

| Сообщение посчитали полезным:

Hi! I have the same problem. I'm trying to unpack vcds.exe ver 12.10.3
PeId said PC-Guard 5.0 -> Blagoje Ceklic
My algoritm of unpacking:
- run Process in OllyDbg
- then run script PC-Guard 5.0 OEP Finder (from Ashraf Cracker)
- then script from this topic from pavka
- use ImpRec and reconstruct calls
- read dump

After that i`ve got a big exe file, that did'n launch (just no errors)
I look at this file in Hex editor and found word "UPX!" in header - maybe it's upxed?
I attempted to reconstruct the header manually, but it caused a CRC error when unpacking
Please, help. Thanks in advance

P.S. all links to unpacked files in this topic not available


Archive with original files (unnecessary removed) ~2Mb:
link1: http://yadi.sk/d/HXP4WLO-7N_4k
link2(mirror): https://docs.google.com/file/d/0B_92-1prYQIkQTZmV19oemJhLXc/edit?usp=sharing

P.P.S. in archive it's already registered

| Сообщение посчитали полезным: