[JackD]

Sorry I could not weigh in on this yesterday, too busy at work.

I only supplied the rsrc section because I suspected that might be Wurstgote's problem with gibberish on his about dialog.

No, my registered to Everyone thing does not create a fully registered program.

The Resbldr programmer has elected to use ASPR's "code encryption/decryption" techniques on 5 sections of the code. ASPR will only decrypt the code if a valid key is present. Look at the JMP's over encrypted code at 5FA8B2, 5FB033, 5FCF11, 5FD236, and 5FD708. Just preceeding each of these jumps is a CALL to check registration status and if registered, ASPR will decrypt the sections and execute them instead of taking the long JMP. To see this work or not, you have to trace the CALLs preceeding these JMPs of an ASPR'd version with ASPR and dips intact, not a dump.

Britedream and I had this discussion on this board some time back and I think he was rather skeptical because that particular target was not neutered by the encrypted code to the extent that this one is.

Reference:

http://www.exetools.com/forum/showthread.php?s=&threadid=3133&highlight=encrypted+sections

JMI, I trust this link doesn't violate the rules.

Regards,
JackD