[5Alive]

Originally Posted by 5Alive

I cannot manually apply FLIRT signatures as I don't have a FLIRT library for Delphi Client/Server Enterprise. Do you know where I can find this? I can't attach to the process with DeDe either, I was wondering if there is anyway to fix this problem?

I've tested the program through normal use and it runs well so I don't think that it has any crypted code blocks remaining.

I'm only basing my assumption that it is packed with ASPR1.3x based on what PEiD reports (1.2x- 1.3x). Stud_PE reports 1.2x[new strain] (I think I may need to update signature library for this).

Okay, So I could identify the vesion of ASP by checking what crypto algo is used in the registration scheme. How else can I reliably identify the version of ASPR used?

Thanks for your help.