Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Newbie question ASPR 1.23 RC4 (long!) (https://forum.exetools.com/showthread.php?t=3397)

britedream 02-16-2004 00:00

the patch for expiretion has nothing to do
with it, the program runs fine without the patch, just the one for option. I am just having hard time to upload it due to my slow dialup connection, could I sent it to u as mail, and you can send it to others.

britedream 02-16-2004 00:18

To Wurstgot
I have sent you through aol the file, check
it with pied the protecter and oep, run it
and select option, go to 578911 and see my path, check string resources. and
let us hear from you.

JackD 02-16-2004 00:19

britedream,

I PM'd you my email.

Satyric0n needs to PM me his FTP and I can upload.

JackD

britedream 02-16-2004 00:21

I realy appreciate your help Jackd, put I aleady send it to Wurstgot , thanks anyway.

Wurstgote 02-16-2004 00:24

I've got the file.
So if anybody else is interested, please drop me a PM with your email address

Regards
Wurstgote

JackD 02-16-2004 00:28

britedream,

I did not patch any code to fix ASPR expiration, just data. This is the way ASPR does it except that it points to registration name in ASPR.

Patch
620484 to F0 3F 61 00
and
613FF0 to 45 76 65 72 79 6F 6E 65 (Everyone)
and the proggie thinks it's registered.

You now get "Registered to: Everyone" in about box.

JackD

britedream 02-16-2004 00:34

That is cool Jackd.
I sent him the dump without any patch, except the one for option.

Wurstgote 02-16-2004 00:40

britedream,

I've checked it with peid, it reports "Borland Delphi 6.0 - 7.0" as compiler (so no protector any more) and OEP is 213654 as expected. Since I'm on Win2k I had to change RestoreLastError to SetLastError with a hex editor, but it won't run. Maybe it has something to do with that change I had to make, but if I got it right, this change (Rest.LastError - > SetLastError) is necessary, since Win2k don't know RestLastError.
In Olly, I get some access violations, first one at 404f5f...

I suppose I did someting wrong, but don't know what...
Any hint?

Regards
Wurstgote

britedream 02-16-2004 00:45

may be you can send it to Jackd if he has windows xp, if that is alright with him

JackD 02-16-2004 00:52

1 Attachment(s)
Wurstgote,

Working IAT on w2k.

JackD

Wurstgote 02-16-2004 00:59

Thanks for that one,

but I've got a stupid question (please remember, I'm completely new to this stuff ;) ):
Is it acceptable to use the IAT with britedream's fixed dump or do I need a clean dump from OEP?

Regards
Wurstgote

britedream 02-16-2004 01:02

If you want I can send you my raw dump without iat fix.

Wurstgote 02-16-2004 01:05

That would be nice!

Thanks,
Wurstgote

JackD 02-16-2004 01:10

Wurstgote,

If you read my last PM, you know I gave you a bad email address but I have PM'd you the correct one. So, I haven't got britedream's dump and can't say for sure but it should work on both. Britedream PM'd me his ASPR fix and it should not effect your program operation. It's always good to start with a fresh dump if in question.

I am on w2k like you so you should try the C3 patch I listed above. It may be that XP handles Britedream's patch differently and so it works for him.

JackD

Wurstgote 02-16-2004 01:12

JackD,

there seems to be some problem concerning your mailbox. Please check your PM.

Regards
Wurstgote


All times are GMT +8. The time now is 05:15.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX