
*******************************************************
**                  Ni2Untelock70                    **
**                                                   **
**             Unpacker for tElock 0.70              **
**                   for Win9x/ME                    **
**                                                   **
**                 (c) 2000, Ni2                     **
**                                                   **
**           Made in Spain (100% espaol :)          **
*******************************************************


INTRODUCTION
------------

When i finished my Ni2Untelock61, i saw that a new version of tElock was in the wild,
please, tE!, dont do this to me, I need a rest :)

tElock 0.70 has a strong poly engine (in the first decryption) and the only way I 
think to fuck the poly-engine is using the DRx registers. You have to be in Ring0 to do that.

The problem is that I use "dirty" tricks to go to the Ring0, and these tricks are not
compatible with WinNT/2000 :(


HOW TO USE Ni2Untelock70
------------------------

Just select a file packed with tElock v0.70 and the file will be unpacked.
The unpacked file will have the same name that the packed program. The packed program
will be stored as *.bak


tElock v0.70 Notes
------------------

tElock 0.70 use a strong polymorphic decryptor to decrypt the first layer --> Use DRx 
registers to fuck the decryptor.

tElock v0.70 use polymorphic code in some decryptors --> You can Emulate the decryptor or 
call the original decryptor :)

tElock can use Mutex protection. tElock will create a Mutex and your program can check the
mutex to see if tElock "wrap" it --> Make a new section which create the original Mutex :)


Recommendations to tE!
----------------------

Hey tE! You have implement a good polymorphic encryption engine this time!!!! 

I have been coding an unpacker for tElock 0.70 for about 5 hours. Is that the time to
implement your super poly-engine and all your new changes? :) 


Ni2's Notes ;p
-----------

No notes for today ;) 

For old notes, see Ni2Untelock61 readme.txt :p


Final Notes
-----------

In this zip, you have the source code of "Ni2Untelock70", you can modify it to unpack new 
tElock versions ;)

I haven't done a lot of test with Ni2Untelock70. If you see any bugs, plz, mail me at:

    ahucha@wanadoo.es
    ahucha@hotmail.com


Ni2's web page at:
    
    go.to/Ni2   (or without go.to/ ---> http://www.angelfire.com/ab4/Ni2/ ) 
