Themida+hardlock hl

[wassim_]

Hi,

Themida + hardlock hl.

I gave this target a shot, used partial dumps and found where to patch in the exe, it turned out that the hardlock check is also beign checked from within an OCX that the exe loads (in fact, the main exe is not more than a frontend to the OCX).

Since the program and the OCX are vb compiled programs (native code), I can use vb decompiler and it gives very good results, but the problem(s) are:

- I tried to make a loader (search and replace using the byte signature I got from the partial dump) yet it complains about not finding the pattern to replace.

- Patching the ocx should be easy since it's not themida protected, but I can't seem to get it to work, the dongle checking routine is being called from within a timer to check every X seconds, I've where the call is being made and where the timer code is in the ocx.

So I need help in this , the target can be downloaded from the internet, I will provide anyone interested with the link and with my detailed findings.