EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > x64 OS

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-08-2009, 22:46
ahmadmansoor's Avatar
ahmadmansoor ahmadmansoor is offline
Exetools Team Manager
 
Join Date: Feb 2006
Location: Syria
Posts: 955
Rept. Given: 442
Rept. Rcvd 341 Times in 124 Posts
Thanks Given: 82
Thanks Rcvd at 34 Times in 19 Posts
ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399
Thumbs up larp64pro.com /Lena151 eXeTools

From the best - Lena151 -

lARP64Tech is active in x64 compression and protection software emphasizing on 64 bit software protection. This includes 64 bit executable compression, 64 bit dll compression, 64 bit executable protection and 64 bit dll protection. Our products are freeware except for the professional versions. The innovative lARP64 technology has resulted in the free 64 bit software compressor and the professional 64 bit software protector.

lARP64Free is a freeware compressor developed as a pure 64 bit compressor (packer). This 64 bit software compressor has no anti-cracking defenses.

lARP64Pro is the strongest 64 bit software protection. This x64 windows program protection software is ideally suited for software developers and companies who wish to secure their applications against cracking and modern reversing techniques or against any other frauduleus intentions.

Good luck!

Lena151 / eXeTools

http://www.larp64.com/
__________________
Ur Best Friend Ahmadmansoor
Always My Best Friend: Aaron & JMI & ZeNiX
Reply With Quote
  #2  
Old 09-22-2009, 22:44
bedrock's Avatar
bedrock bedrock is offline
Friend
 
Join Date: May 2002
Posts: 91
Rept. Given: 8
Rept. Rcvd 5 Times in 2 Posts
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
bedrock Reputation: 5
I wonder when lena will give us a tut for unpacking larp?
Reply With Quote
  #3  
Old 09-22-2009, 23:00
Loki Loki is offline
Lo*eXeTools*rd
 
Join Date: Jan 2009
Posts: 118
Rept. Given: 147
Rept. Rcvd 65 Times in 30 Posts
Thanks Given: 44
Thanks Rcvd at 6 Times in 5 Posts
Loki Reputation: 65
Yeah, um, that would slightly undermine the business model dont you think? :P
Reply With Quote
  #4  
Old 09-23-2009, 17:59
what
 
Posts: n/a
Quote:
Additionally, there is also a money back guarantee for purchases during launching period and in case your software should get cracked within 6 months after purchase. (It won't!)
That is some confidence, but it will get cracked, so after about 4 or so months this should be removed from the web page, lol. It would be less time if there was a descent 64 bit debugger.

Last edited by what; 09-23-2009 at 18:06.
Reply With Quote
The Following User Gave Reputation+1 to For This Useful Post:
  #5  
Old 10-27-2009, 04:29
lena151 lena151 is offline
Friend
 
Join Date: Oct 2005
Posts: 14
Rept. Given: 0
Rept. Rcvd 12 Times in 4 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
lena151 Reputation: 12
lARP64Pro 1.0.0 is again available for download.

Quote:
Changelog (compared to the initial public release december 2008)
- Polymorphic engine
- Virtual Machine
- Dual API redirection
- Windows 7 compatible
- More minor protection features added
- Optimization for speed
- Blue skin fixes the dark skin icon bug
- Bugfix in the disassembler engine
- Bugfix in image creation
- Bugfix in displaying the PE32+ header strings
- Bugfix when illegal opcode found
- Languages: english, german, french, spanish, dutch
- Additional minor layout changes
I want to specifically mention the optimization for speed.

Many thanks to a great friend who talked me into this and without whom lARP64Pro wouldn't exist ...

LMK if you find any bugs.

lena151.
Reply With Quote
  #6  
Old 06-18-2010, 17:00
UNIX UNIX is offline
Friend
 
Join Date: Apr 2009
Posts: 22
Rept. Given: 1
Rept. Rcvd 4 Times in 2 Posts
Thanks Given: 1
Thanks Rcvd at 0 Times in 0 Posts
UNIX Reputation: 4
Quote:
Indeed, lARP64Pro makes it so hard and time consuming that so far, no lARP64Pro protected file has been cracked yet!
Is this still true? Anyone working on a target or any PoC available? Just curious.
Reply With Quote
  #7  
Old 06-20-2010, 00:31
AttonRand
 
Posts: n/a
yes, it has already been unpacked but i don't remember where is the thread and i don't know if it was a fully or partial protected app .
however, as What already stated it's the lack of 64-bit debugger which makes hard the research.
Reply With Quote
  #8  
Old 06-20-2010, 18:23
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,033
Rept. Given: 217
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 47
Thanks Rcvd at 60 Times in 32 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
Lack of 64bit debugger?. Why do you think that?. Both IDA64 debugger and Microsoft Windbg (Debugging Tools for Windows) work just fine and I would be surprised if there are not others too.

Git
Reply With Quote
  #9  
Old 06-20-2010, 20:43
Fyyre's Avatar
Fyyre Fyyre is offline
VIP
 
Join Date: Dec 2009
Location: 0xfffffffe
Posts: 115
Rept. Given: 38
Rept. Rcvd 57 Times in 26 Posts
Thanks Given: 9
Thanks Rcvd at 51 Times in 11 Posts
Fyyre Reputation: 57
WinDbg has a large learning curve, and lacks many small features e.g. saving breakpoints between sessions.

IDA as a disasm, yes. As a debugger, no thanks...

Everyone has difference of preference, yet I think it fair(imo) to say both are sub-par when compared to OllyDbg.

Hopefully the OllyDbg64 comes with post haste.

-Fyyre

Quote:
Originally Posted by Git View Post
Lack of 64bit debugger?. Why do you think that?. Both IDA64 debugger and Microsoft Windbg (Debugging Tools for Windows) work just fine and I would be surprised if there are not others too.

Git
Reply With Quote
  #10  
Old 06-21-2010, 03:46
DooGie DooGie is offline
Friend
 
Join Date: Jan 2002
Location: Stockport UK
Posts: 74
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
DooGie Reputation: 0
I've been out of the loop for a long time now and fallen behind on things.

Are you guys saying that IDA is x64 compatible now?
Reply With Quote
  #11  
Old 06-21-2010, 05:31
Fyyre's Avatar
Fyyre Fyyre is offline
VIP
 
Join Date: Dec 2009
Location: 0xfffffffe
Posts: 115
Rept. Given: 38
Rept. Rcvd 57 Times in 26 Posts
Thanks Given: 9
Thanks Rcvd at 51 Times in 11 Posts
Fyyre Reputation: 57
Quote:
Originally Posted by DooGie View Post
I've been out of the loop for a long time now and fallen behind on things.

Are you guys saying that IDA is x64 compatible now?
Yes, it is. idag64.exe is the IDA binary with x64 support.
Reply With Quote
  #12  
Old 06-22-2010, 04:30
AttonRand
 
Posts: n/a
Quote:
Lack of 64bit debugger?. Why do you think that?. Both IDA64 debugger and Microsoft Windbg (Debugging Tools for Windows) work just fine and I would be surprised if there are not others too.

Git
the problem with windbg is the time you need to spend coding your own extensions to improve the gui and functionality. The core is very powerful indeed. As far as i know only Cracklatinos did some research on windbg and release some plugins (in spanish).
As for Ida i completely agree with Fyyre but i am sure that in the near future hex rays will improve the debugger (they did a great job with latest builds).

Quote:
i don't remember where is the thread and i don't know if it was a fully or partial protected app .
For those who might want to check (i am not on x64 yet), the unpacked larp has been done by pavka here:

HTML Code:
http://forum.tuts4you.com/index.php?showtopic=16327&view=findpost&p=81867
No details are available though
Reply With Quote
  #13  
Old 06-23-2010, 11:57
BiMode BiMode is offline
VIP
 
Join Date: Apr 2003
Location: You better guest where...
Posts: 127
Rept. Given: 36
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 13
Thanks Rcvd at 6 Times in 3 Posts
BiMode Reputation: 2
So is there any cracked version available yet?
Reply With Quote
  #14  
Old 06-25-2010, 06:14
lena151 lena151 is offline
Friend
 
Join Date: Oct 2005
Posts: 14
Rept. Given: 0
Rept. Rcvd 12 Times in 4 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
lena151 Reputation: 12
Quote:
Originally Posted by BiMode View Post
So is there any cracked version available yet?
Ehm, Attonrand is referring to a 32 bit version. There is no need to ask for a crack since lARP Ultimate was in fact specifically developed to protect releases against lamers, that's why it is kept internal. FYIO: lARP = lena151 Anti Rip Protector
No offence intended in case you do not have the proper "connections" to get hold of it

lena151.
Reply With Quote
  #15  
Old 05-26-2012, 05:13
lena151 lena151 is offline
Friend
 
Join Date: Oct 2005
Posts: 14
Rept. Given: 0
Rept. Rcvd 12 Times in 4 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
lena151 Reputation: 12
lARP64Pro was first released 3 1/2 years ago. Although I posted an unpackme from it in another forum, it was never unpacked. lARP64Pro itself was never cracked either. People above have been talking about the unpacking of a simple anti-rip-protector for 32 bit which was only intended to keep lamers away. See my previous post above.

The 64 bit protector was different stuff though but its development was stopped January 2012 because there was no fun in maintaining a program that didn't offer any anti-cracking challenge since there was never a necessity to "keep ahead of the community". But now, I want lARP64Pro to get defeated finally. So, I'm providing a new crackme that offers many different points of attack: tuts4you.com/download.php?view.2815

This new crackme should make it accessible for everyone because patching is allowed. The goal is to unpack either of the executables OR circumventing the program's unregistered window. Any means are allowed: patching, inlining or unpacking or whatever you can think of. I coded no trap at all in the unpackme and certainly not in killing the program's nag screen. It's a simple patch from a conditional jump and I have made this as simple as I can. You really can't want me to provide you with the offset to patch as well, right?

Inside the archive are two UnpackMes/CrackMes protected by lARP64Pro. It is both the same executable (64-bit-only) but once protected with an unregistered lARP64Pro (trial) and once with a registered lARP64Pro. This offers additional info because killing the unregistered messagebox in the trial-protected crackme would be a good start as well. Info: an unregistered lARP64 Pro adds an additional timely message.

I'm convinced this can only take a couple minutes now. Let me know how you did it!

Attention: lARP64Pro is a 64-bit-only protector.

Good luck,

lena151.
Reply With Quote
The Following 3 Users Gave Reputation+1 to lena151 For This Useful Post:
ahmadmansoor (05-31-2012), deepzero (05-26-2012), Vivaldi (05-26-2012)
The Following User Says Thank You to lena151 For This Useful Post:
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Exetools and exe-scene SkY[vN] General Discussion 30 03-10-2010 09:25


All times are GMT +8. The time now is 20:23.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX