|
|
|
|
#1
03-04-2009, 17:17
|
||||
|
||||
|
it's so simple that it shouldn't ever be considered a release.
1. before 5.2 unpack the dll named ida.wll with any aspack unpacker like aspackdie or "All versions ASPack unpacker by PE_Kill". Consider that after version 5.2 (or from version also 5.2, don't remember) that dll is even not packed, so simpler. 2. find string "pirate" with Olly and skip the messagebox paching into a JMP the conditional jump just above 3. save the patch, voilà. The protection was placed, as once even the author told, just as a light discouragement, not as a real protection. If you don't know how to patch is a symptom that you shouldn't use IDA. ;-)
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪) There are only 10 types of people in the world: Those who understand binary, and those who don't http://www.accessroot.com 
|
| The Following 2 Users Gave Reputation+1 to Shub-Nigurrath For This Useful Post: | ||
backdoor_b (03-11-2009), synkro (03-05-2009) | ||
|
#2
03-04-2009, 20:18
|
||||
|
||||
|
Patching of JMP "pirate" was not enough to achieve my goal (the incriminated message is "database corrupt" and not "you are using a pirate..."). Anyway i have patched both the ways
 Regards
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Database programming in C++ | hmora | General Discussion | 1 | 07-12-2004 09:48 |
Hybrid Mode
