Results 1 to 4 of 4

Thread: Asprotect trick?

  1. #1
    banshee
    Guest

    Question Asprotect trick?

    I tried to unpack JavaSMS
    h**p://www.vd-soft.com/downloads/JSMS124.zip
    It is ASprotected, don't know the version. I've found OEP, dumped and rebuilt imports using ImpRec. Everything is fine but there are errors: "Access violation. Memory cannot be written (or read)". I traced that places, there is something like "mov [eax], edx" and eax is not valid address. In original program everything works fine. Is it asprotect trick? Or I have a problem with hands?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    banshee
    Guest

    More info

    Tried to unpack another program. The same problem: execution fails in function System::SysGetMem(int). Think this is some trick with resources. Any ideas?
    Here the program:
    h**p://www.vd-soft.com/downloads/HID4JSMS.zip
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,516
    Blog Entries
    1
    nothing new..
    at 5006AC is pointer[address of mem] to your hardware ID in asspr module.
    Look in that address & copy that bytes into EXE,
    then rewrite that address at 5006AC to your.

    PS.
    you must read tutorials about asspr unpacking. For example, about AAtools.

  4. #4
    banshee
    Guest

    Thanx

    Thanx
    It was lazy way, I'm sorry. I should go now to learn, learn, learn Anyway thanx.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Any trick
    By w_a_r_1 in forum The Newbie Forum
    Replies: 4
    Last Post: July 15th, 2009, 09:03
  2. Help about such a strange SEH trick
    By kcynice in forum Advanced Reversing and Programming
    Replies: 16
    Last Post: June 4th, 2008, 11:52
  3. How to solve this trick ?
    By linhan in forum Malware Analysis and Unpacking Forum
    Replies: 12
    Last Post: November 9th, 2007, 23:30
  4. New antidebug trick
    By Opcode in forum Advanced Reversing and Programming
    Replies: 8
    Last Post: November 27th, 2005, 05:50
  5. Alexeys *new* trick ?
    By +SplAj in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: February 26th, 2001, 18:55

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •