Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-17-2011, 05:09
new_profile new_profile is offline
VIP
 
Join Date: Aug 2002
Posts: 153
Rept. Given: 27
Rept. Rcvd 7 Times in 7 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 23 Posts
new_profile Reputation: 7
Quote:
Originally Posted by sendersu View Post
I"ve similar issue - with the same dll name!
you have to inspect carefully each dll in temp dir (with stange names like ~blabla.tmp,etc!
I recommend to search by contents for validate word
but do it when app is asking s/n, not after it was closed.
the dll definitely must be present in temp dir!
you could also use procmon to monitor when it'll be written there....
good luck
Hi,
you're right, the dll is unpacked in temporary folder but just when the serial check is made. I thought that by displaying the serial number dialog box is enough to find the required DLL but this is not the case.

Thank you all for your help.
By the way, the app is Wowza media server.
Reply With Quote
  #2  
Old 12-17-2011, 06:45
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Well, that dll is not the point you should pay your time for....
why? because it does not have the full s/n validator as the java classes have.....

it accepts even fake s/n, here is an example:
00000-99999-00000-00000-00000-0000z

again, the real s/n validator is hidden deep deep down in a highly obfuscated java code (yes, not names, but java code!)
you'll have a real fun reversing it, I guarantee it to you

if you are interestd, I could post the validation code for S/N from that tricky dll.....
half a screen page
Reply With Quote
  #3  
Old 12-17-2011, 22:28
new_profile new_profile is offline
VIP
 
Join Date: Aug 2002
Posts: 153
Rept. Given: 27
Rept. Rcvd 7 Times in 7 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 23 Posts
new_profile Reputation: 7
You're right. I've found that any expired key will be accepted with no problem.
I've played a little bit with the server.jar and FileChunk class and it seems that even the JD-GUI doesn't decompile it.
Back to java disassembly to see what to do with.

Thank you
Reply With Quote
  #4  
Old 06-14-2012, 01:51
uCares
 
Posts: n/a
Or just use msiexec command line like :

msiexec /a youMSIfile.msi TARGETDIR="Path:\\where\You\Want\The\File"

This will do an administrative install, you should then get the files with the all Folder tree from inside the msi
Reply With Quote
The Following User Gave Reputation+1 to For This Useful Post:
|roe (06-15-2012)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
unlinker IDA - an IDA plugin for extracting functions from a PE file for later reuse jonwil Community Tools 9 02-26-2022 04:48
unlinker - a program for extracting functions from a PE file for later reuse jonwil Community Tools 5 11-25-2016 08:24
Self Extracting Exe SLIM SLIM General Discussion 0 12-17-2002 04:34


All times are GMT +8. The time now is 02:48.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )