#31
|
|||
|
|||
To Ferrari
This target is much easier than whereIsIt, just fix the iat and it will run fine,
here is the iat to compare to: (don't use it on yours, it will not work,just compare it to your iat.) note: i have the target unpacked , if you want, I will be glad to send it to you. Last edited by britedream; 06-02-2004 at 16:22. |
The Following User Says Thank You to britedream For This Useful Post: | ||
Indigo (07-19-2019) |
#32
|
|||
|
|||
To Ferrari
Quote:
here is the same code in my unpacked target: 00407294 - FF25 C041C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetMod>; kernel32.GetModuleFileNameA 0040729A 8BC0 MOV EAX,EAX 0040729C - FF25 C441C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetMod>; kernel32.GetModuleHandleA 004072A2 8BC0 MOV EAX,EAX 004072A4 - FF25 7C47C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetPro>; kernel32.GetProcAddress 004072AA 8BC0 MOV EAX,EAX 004072AC - FF25 C841C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetPro>; kernel32.GetProfileStringA 004072B2 8BC0 MOV EAX,EAX 004072B4 - FF25 CC41C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetStd>; kernel32.GetStdHandle 004072BA 8BC0 MOV EAX,EAX 004072BC - FF25 D041C100 JMP NEAR DWORD PTR DS:[<&kernel32.GetStr>; kernel32.GetStringTypeExA Last edited by britedream; 06-02-2004 at 11:32. |
The Following User Says Thank You to britedream For This Useful Post: | ||
Indigo (07-19-2019) |
#33
|
|||
|
|||
i don't get any knowledge getting an unpacked exe from someone .. i don't have fun like that.. i need some papel/notes about unpacking this latest Aspr. specially fixing IAT
|
#34
|
|||
|
|||
Quote:
ferrari maybe your oep is wrong,i found oep on different way,fix iat and program is working,i m under xp. I attach file,and maybe can help you. with best wishes |
#35
|
|||
|
|||
To el-kiwi
Hi
are you sure it is the same verion BadCopy pro 3.74 build 403. |
#36
|
|||
|
|||
Quote:
no it is not,now i see its 3.74 build 0531,but i download it yesterday,and now peid say aspack 1.07b! i dont get it. I apologize for misunderstanding. Last edited by el-kiwi; 06-02-2004 at 21:54. |
#37
|
|||
|
|||
To el-kiwi
Here is the unpacked Badcopy if you wish to tackle asprotect:
|
#38
|
|||
|
|||
its working,I just delete this old one,and programs works fine on my machine.is there any chance to write tutorial about unpacking this version britedream?
|
#39
|
|||
|
|||
@el-kiwi
OEP is right mate but from britedreams post I see where the problem is. @britedream Btw britedream I 'll check ur input and let you know ..I want to know how u did it rather than downloading the unpacked exe Regards, |
#40
|
|||
|
|||
I just grabbed the latest (3.74 0531) version of BadCopy Pro from hxxp://www.jufsoft.com/badcopy/ and that's most definitely not asprotected.
Author must have given up on asprotect. Edit: Build 0403 couldn't have been Asprotect 1.31, it was way more like 1.23 RC4. Lemme know if I'm mistaken. Hence, easy to unpack. Regards SvensK Last edited by SvensK; 06-03-2004 at 02:22. |
#41
|
|||
|
|||
it is 131 to me .
|
#42
|
|||
|
|||
My file version is 3.7.4.0 and filesize is 587 KB (601 600 bytes).
Are yours different? |
#43
|
|||
|
|||
size on disk 640kb, and version 3.74 build 403
|
#44
|
|||
|
|||
Right-click the .exe and check Properties, then Version tab.
What does it say at the top? |
#45
|
|||
|
|||
Hmm
I just downloaded and unpacked the latest version myself. It is an old Aspack version (Aspack 1.07).
hobgoblin |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Anyone can help me with this one?? ASProtect | loman | General Discussion | 0 | 12-31-2003 16:37 |