TI Interactive! Softlocxed

[nikola]

You can try to get to OEP in packed file and then put BP on access on packers sections. Its possible that program checks for registration or for exe validity by calling packers API. This way you can find where its calling that API from and nop it or jump over it or whatever is needed.

[TmC]

Afaik, Softlocx does not have program Apis or registration screens. The program is a limited trial without possibility of registration.

This problem should be related to new version of packer because:

Tried to Dump Softlocx v5: Oep 1000, Dump OK, IAT Rebuilt with deletion of invalid thunks, Exe RUNS

Tried to Dump Crunch v1.2: Oep 1000, Dump OK, IAT Rebuilt with deletion of invalid thunks, Exe RUNS

Tried to Dump Fusion v2: Oep 1000, Dump OK, IAT Rebuild with deletion of invalid thunks, Exe RUNS

Tried to Dump Digiwrap v2: Oep B27AC, Dump OK, IAT Rebuild without deletion of thunks(no invalid), EXE DOES NOT RUN (SAME AS TI)

Tried to Dump Ti Interactive: Oep 1BF5B, Dump OK, IAT Rebuild without deletion of thunks(no invalid), EXE DOES NOT RUN


So, as far as i can see, the executables that have OEP = 1000(no relocation of oep) and in which i have to delete invalid thunks of import table and fix it, DO RUN, Executables that have relocated OEP but perfect import table recovered by imprec, DO NOT RUN with those errors.

I think that the difference is that some are packed with Softlocx 5.0 and some others with TrialWrap 5.1, so there should be something that go wrong with unpacking this last.

I believe this but not sure. Attached is my unpacked that does not run.