Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-28-2004, 04:09
BetaMaster BetaMaster is offline
Friend
 
Join Date: Dec 2002
Posts: 77
Rept. Given: 6
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
BetaMaster Reputation: 3
Quote:
Originally Posted by hobgoblin
So do I.
I can't get a dump as described, and britedreams script didn't work either. The reason I wanted to dump it was to take a closer look at the protection that lies in the program code itself. As far as I understand the program is protected by a strong protection (hash code)to prevent any changes in the code. That's interesting. So if you have a dump, I would love to get my hands on a copy.

regards,
hobgoblin
external hash, code injection, visual basic 6 crap, encrypted segments, advanced antidebugging, very long license with more than 12 long long attributes online serial check, and online bad serial check.what do you need more?
Reply With Quote
  #2  
Old 06-28-2004, 04:22
hobgoblin hobgoblin is offline
Friend
 
Join Date: Jan 2002
Posts: 124
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
hobgoblin Reputation: 0
Well,

Is that all?
Just kidding. Your answer give me the info I need.
I just don't want to spend my time on a bastard like this one.
I'm going back to studying the new Asprotect instead.....

regards,
hobgoblin
Reply With Quote
  #3  
Old 06-28-2004, 07:31
Crk
 
Posts: n/a
here it is... it just miss IAT .use Imprec for IAT

you can use some PE realigner and PE fixer on it .. just in case
Reply With Quote
  #4  
Old 06-28-2004, 07:41
BetaMaster BetaMaster is offline
Friend
 
Join Date: Dec 2002
Posts: 77
Rept. Given: 6
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
BetaMaster Reputation: 3
Quote:
Originally Posted by Crk
here it is... it just miss IAT .use Imprec for IAT

you can use some PE realigner and PE fixer on it .. just in case
you say it as if it is trivial!

well body, why don't you do the IAT fix too, I am sure that you'll know then that you haven't taken a step yet.

Last edited by BetaMaster; 06-28-2004 at 07:49.
Reply With Quote
  #5  
Old 06-28-2004, 07:51
Crk
 
Posts: n/a
attached...
Reply With Quote
  #6  
Old 06-28-2004, 16:04
BetaMaster BetaMaster is offline
Friend
 
Join Date: Dec 2002
Posts: 77
Rept. Given: 6
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
BetaMaster Reputation: 3
hmmm, thanks ... nice work but where did ordinal at rva 1094 go? I think Real|sty stuck with the same entry.ok, I'll try to find it by myself.

Thanks again Crk for the dump and the IAT tree file.
Reply With Quote
  #7  
Old 06-28-2004, 21:41
Crk
 
Posts: n/a
can't find it neither.. maybe is invalid to fool with us ??? if invalid then just nop it
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 06:22.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )