View Single Post
  #10  
Old 08-13-2005, 04:13
Maltese
 
Posts: n/a
Using Olly...

Inside the .rdata of the dll I see the error text:

100257B0 4D 6F 64 75 6C 65 73 2E Modules.
100257C0 00 00 00 00 41 70 70 6C 69 63 61 74 69 6F 6E 50 ....ApplicationP
100257D0 72 65 66 69 78 00 00 00 00 00 00 00 4D 6F 64 75 refix.......Modu
100257E0 6C 65 73 00 00 00 00 00 43 4C 69 63 65 6E 73 65 les.....CLicense
100257F0 43 6F 6E 74 72 6F 6C 3A 3A 6F 6E 43 6F 6D 6D 61 Control:nComma
10025800 6E 64 28 25 73 29 20 75 6E 68 61 6E 64 6C 65 64 nd(%s) unhandled
10025810 00 00 00 00 00 00 00 00 00 00 00 00 43 4D 5F 43 ............CM_C
10025820 48 45 43 4B 5F 41 50 50 4C 49 43 41 54 49 4F 4E HECK_APPLICATION
10025830 5F 4C 49 43 45 4E 53 45 00 00 00 00 00 00 00 00 _LICENSE........
10025840 57 69 64 67 65 74 50 74 72 00 00 00 4E 61 6D 65 WidgetPtr...Name
10025850 00 00 00 00 43 4D 5F 43 48 45 43 4B 5F 4D 4F 44 ....CM_CHECK_MOD
10025860 55 4C 45 5F 4C 49 43 45 4E 53 45 00 00 00 00 00 ULE_LICENSE.....
10025870 5C 73 79 73 74 65 6D 33 32 5C 00 00 00 00 00 00 \system32\......
10025880 63 6F 6E 74 00 00 00 00 78 10 00 10 4C 69 63 65 cont....x...Lice
10025890 6E 73 65 20 45 6E 67 69 6E 65 20 43 52 43 2D 45 nse Engine CRC-E
100258A0 72 72 6F 72 00 00 00 00 00 00 00 00 41 70 70 6C rror........Appl
100258B0 69 63 61 74 69 6F 6E 20 63 68 65 63 6B 00 00 00 ication check...
100258C0 00 00 00 00 46 69 6C 65 20 69 6E 76 61 6C 69 64 ....File invalid
100258D0 2C 20 65 72 72 6F 72 20 43 30 52 2D 35 36 43 00 , error C0R-56C.

MaRKuS,

Not sure how I can explain, but I will try.

I traced the EXE file, the welcome splash opens, then it loads the libraries before the program gets to run... There must be something inside the dll that when it opens it may create an unhandled exception (see above) and display the error code. I took another dll from the program and renamed it and the program got past the loadlibrary section just fine. The license dll is the only one with the Visual C++ Method2 [OVERLAY] in the PE Header from PEiD. The rest of the DLL's are just Visual C++ Method2.

Any thoughts?
Reply With Quote