EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #121  
Old 02-17-2004, 22:53
Satyric0n
 
Posts: n/a
Quote:
Originally posted by britedream
note:I don't have any dips in my dump, and I get no access violation errors when I open about.
britedream, since your dump appears to be working so much better than my own and Wurstgote's, can you tell us where (at what address) you dumped the app?

Regards
Reply With Quote
  #122  
Old 02-18-2004, 00:37
JackD JackD is offline
Friend
 
Join Date: Jan 2002
Posts: 43
Rept. Given: 4
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 3
Thanks Rcvd at 0 Times in 0 Posts
JackD Reputation: 1
Sorry I could not weigh in on this yesterday, too busy at work.

I only supplied the rsrc section because I suspected that might be Wurstgote's problem with gibberish on his about dialog.

No, my registered to Everyone thing does not create a fully registered program.

The Resbldr programmer has elected to use ASPR's "code encryption/decryption" techniques on 5 sections of the code. ASPR will only decrypt the code if a valid key is present. Look at the JMP's over encrypted code at 5FA8B2, 5FB033, 5FCF11, 5FD236, and 5FD708. Just preceeding each of these jumps is a CALL to check registration status and if registered, ASPR will decrypt the sections and execute them instead of taking the long JMP. To see this work or not, you have to trace the CALLs preceeding these JMPs of an ASPR'd version with ASPR and dips intact, not a dump.

Britedream and I had this discussion on this board some time back and I think he was rather skeptical because that particular target was not neutered by the encrypted code to the extent that this one is.

Reference:

http://www.exetools.com/forum/showthread.php?s=&threadid=3133&highlight=encrypted+sections

JMI, I trust this link doesn't violate the rules.

Regards,
JackD

Last edited by JackD; 02-18-2004 at 02:35.
Reply With Quote
  #123  
Old 02-18-2004, 01:36
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Clickable links WITHIN the Forum are just fine.

Regards,
__________________
JMI
Reply With Quote
  #124  
Old 02-23-2004, 03:42
fakir
 
Posts: n/a
If i understand right, if i want to save the created designs or edit as text, must to decrypt the sections and as a result, we need Asprotect to decrypt them. Because, asprotect decrypts the sections.

So, we must to find the licence key as ResBuilder wants. I understood right? Did anybody succeeded?
Reply With Quote
  #125  
Old 02-24-2004, 15:48
Wurstgote
 
Posts: n/a
If I got it right, you need more than just a serial: You'll also need the key the programmer had used to encrypt the "registered user" functions, since it's crucial for decrypting them.

Regards
Wurstgote
Reply With Quote
  #126  
Old 02-24-2004, 18:12
crusader
 
Posts: n/a
Nope.. you just need the serial... u can try and see if aspr store blacklisted serial and use them to decrypt ... or find an old serial floating on the web
Reply With Quote
  #127  
Old 02-27-2004, 11:41
fakir
 
Posts: n/a
I wonder can we use all functionality as unpacked. But suppose no, as i understood. Aspr is really great if so, we may loose ourself in a code wood.

crusader

Which serial do you mean in net? 1.0 serials?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
one newbie question SubzEro General Discussion 7 03-12-2015 06:05
ASPR, ARMA question sgdt General Discussion 3 04-09-2006 03:38
ASPR 1.2 question gabri3l General Discussion 42 05-01-2004 15:09
a newbie question about CRC32 abccc General Discussion 13 04-23-2004 03:13
"newbie" question for crackers ;) newbie007 General Discussion 4 10-07-2003 04:46


All times are GMT +8. The time now is 07:15.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX