Inline patch or loader for Asprotec 1,24-1.3????

[the_beginner]

hi

I got a proggy is packed with Asprotec 1.24-1.3 and I don't know how can I make a loader (because ERROR 45) Protection Error .
Have some one a Idea??

hXXp://www.haenlein-software.de/haenlein-software/index2.php?navigation=dvr-studio-pro&s=2&unav=nav_progs&sprache=german

Many Thanks

Maybe this will help you.
hxxp://www.exetools.com/forum/showthread.php?t=2300&highlight=AsProtect+Loader+v0.b

Another tool you can try,I think it's great.

DzA Patcher v1.3 for Windows 95/98/NT/ME/2000
ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ

coded by DzA [TNT] using Tasm 5.0
Greetings to:LightB,Singe!,SiR dREam,Wishmaker,_blade_



Description:
ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ

If you were looking for a tool wich can PATCH almost any kind of encrypted/compressed PE file,without using crap
"loaders" or other kind of memory patchers,without needing to spend so much time to do a direct patch in the exe using
compressor/encryptor loader redirectioning methods ,well you were looking for DZA's Patcher.
With this patcher you can even patch files wich were encrypted with multiple layers

[the_beginner]

thanks

bad this still not work :-(, shit because i god many Errors :-(

[diablo2oo2]

ABEL Loader Maker can make asprotect loader. it patch when he find the window
of the app.

another little trick i use to make asprotect loaders:
i code a loader which wait till a value is written to memory, after the
crc check

so it look like this in asm

invoke CreateProcess,addr filename, NULL, NULL, NULL, NULL, NULL,
			      NULL, NULL, ADDR Startup, ADDR processinfo
	.IF eax == NULL
		invoke MessageBox, NULL,SADD ("Can't create process"),ADDR filename, MB_ICONEXCLAMATION
	.ELSE	
		@readagain:
		invoke ReadProcessMemory, processinfo.hProcess,04BB014h,addr ReadByte, 4, NULL
		.if dword ptr[ReadByte]==00401270h	;test value ...is crc check over?
			;now patch....
			invoke WriteProcessMemory, processinfo.hProcess, 0043CFC7h, ADDR NewBytes,SIZEOF NewBytes, NULL
			invoke WriteProcessMemory, processinfo.hProcess, 00490a9ch, ADDR NewBytes2,SIZEOF NewBytes2, NULL
		.else
			jmp @readagain	
		.endif	
	.ENDIF

[JMI]

the_beginner:

Small lesson in proper English spelling, simply because your effor makes a word you do not intend.

You keep spelling the English word "got" (erhalten) as "god" which is the English word for Gott. Major difference. I know that in German a "d" at then end of a word can sometimes be pronounced as a "t" but that is a rather important word not to use by mistake. Verstehen?

Regards,

[diablo2oo2]

here is an example loader code for an asprotect code:

http://diablo2oo2.di.funpic.de/stuff/photoclean.2.10-aspr.loader.sourcecode.rar

you can find the target app here

http://www.trulyphotomagic.com

PS: My next dUP version will support this MemCheck Method. so you can create
loaders for many asprotect apps.

http://diablo2oo2.di.funpic.de/stuff/dup.memcheck.loaders.jpg