Tried unpacking DVDIdle Pro - AsProtect

Where's the push in your exe to read the name at 444600 ?

[britedream]

To Svensk
in error one above, there is a call right above it, step into, and change the value of the address being move to eax, to point to an address where your name is at.

I see what you mean britedream.

Still some problem though. I've compared the "code" section of mine and your dumped exe and even though there are no differences, yours is registered and mine is not. Do you have custom code executed in any of the other sections.

[britedream]

you saw the address at 444600 ,where my name is,just go to the address moved to eax in dump and change the value to 444600.
you should change the value of the address moved, not the address its self.

Hehe, sorry for being so thick. All is well and it runs registered now.
Thanks a bunch m8

To lownoise,

When I changed the code to xor EAX , EAX DVDIdle Pro came up with the splash screen.

Is this something that is commen with AsProtect? I recall Stripper creating a working exe out of dvdIdle Pro.

I thought this whole process was to create an unpacked version of the original program. yes?

I will look thru this executing exe and see if I can discover the algorithm for the serial #.

After doing some tracing....

Since I am interested in creating a serial#.... the code to check for a valid serial # is missing. That's why the XOR EAX,EAX works because the serial# check is missing (from the program). It's not being left in "unpacked" program (which is probably why there aren't many keygens for AsProtect Programs IE: PowerStrip and DVDIdle Pro/Region Free).

I BP on all (and every) RegQueryKey and it never loads hKey with "KEY" which is where the code is stored in the Registry.

When you go thru the enter serial # dialog box.... it's a dummy... no check is done. It just saves it to the registry and tells you to restart. When you restart the program.... it bypasses the missing code due to the XOR EAX,EAX.

How do I get that code into the pack as well? Is it impossible with AsProtect?

-Malt....

Me Thinks I have to do this in memory... and not from an unpacked file.