Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-29-2018, 16:28
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
DeDe is very old tool, try IDR (Interactive Delphi Reconstructor)

most powerful feature is to find a control-event handler (in a seconds)
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
Indigo (07-19-2019)
  #2  
Old 02-06-2018, 12:23
psgama psgama is offline
Friend
 
Join Date: Jul 2014
Posts: 101
Rept. Given: 0
Rept. Rcvd 6 Times in 6 Posts
Thanks Given: 12
Thanks Rcvd at 75 Times in 44 Posts
psgama Reputation: 6
cgrs,

I believe the key being used is

0DEBF4F725768E6195BD7A1226CC782C

It has been a very very long time since I worked on this protection, and can't seem to remember how to trace the modifiers out. But I believe this should be a start.


In ollydbg it is loaded here
Code:
 dregistro::TFormRegistro.OgDaysCode1GetKey
 00770194    push       ebx
 00770195    push       esi
 00770196    push       edi
 00770197    mov        ebx,ecx
 00770199    mov        edi,ebx
 0077019B    mov        esi,9E5674
 007701A0    movs       dword ptr [edi],dword ptr [esi]
 007701A1    movs       dword ptr [edi],dword ptr [esi]
 007701A2    movs       dword ptr [edi],dword ptr [esi]
 007701A3    movs       dword ptr [edi],dword ptr [esi]
 007701A4    pop        edi
 007701A5    pop        esi
 007701A6    pop        ebx
 007701A7    ret
Reply With Quote
The Following 2 Users Say Thank You to psgama For This Useful Post:
cgrs (04-04-2019), Indigo (07-19-2019)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SoftIce For 9x Beginner - HELP PiG_DoG General Discussion 3 06-27-2003 17:31


All times are GMT +8. The time now is 16:25.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )