Results 1 to 6 of 6

Thread: Vbox

  1. #1
    linda
    Guest

    Angry Vbox

    Mathcad 2001 demo is a toughie for vbox

    U can find the oem point easy enough 00420906 using marigolds
    lesson.Tsehp then goes on to list the decoding routine in VBOXT which xors and xors the 05 or 04 in the table at rva 24000.

    Actually i have used revirgin to unravel all the jumps/calls from 24000 on for D28.Ive now got alist of all the subroutines from this point.Interestingly enough though if u try and run it it slips into the abyss after a call to winmain and trashes.

    This is a good protection.not sure if this will ever be fixed.
    This may be the biggun.

    beanhauler
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Sure there's no API emulation or hooking in the app? I know this is rare for a vbox app, but it's certainly possible. That way as soon as the app is stripped of it protection, it'll crash - which is what it seems like it's doing to you.

  3. #3
    linda
    Guest


    hmm think this is a new way from the makers of vbox
    Perhaps Tsehp may have some comments.
    Thanks for the reply though its good to know there are others
    out there

    Beanhauler
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    mojo2k2
    Guest
    dreamweaver, probabbly other macromedia apps, wordperfect, probably other corel apps, delphi, painter.. others
    all these apps trial comes with new-age possibly "secret" versions of vbox labeled "4.3" .. but is it 4.3?

    aladdin systems sneaking around behind crackers backs
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    Lbolt99
    Guest

    Vbox is boring

    I just cooked up Corel Graphics Suite 11 and Wordperfect Suite 10.. both currently available as trials from the site... nothing to indicate "stealth" versions. Floorplan 3D by IMSI was protected by 4.3 but it was really 4.3



    Originally posted by mojo2k2
    dreamweaver, probabbly other macromedia apps, wordperfect, probably other corel apps, delphi, painter.. others
    all these apps trial comes with new-age possibly "secret" versions of vbox labeled "4.3" .. but is it 4.3?

    aladdin systems sneaking around behind crackers backs
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    mojo2k2
    Guest
    see it's easier to believe that it wasn't my cracking skills but rather a vbox conspiracy..
    sigh.. thx for the followup
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Vbox 4? help
    By K19 in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: January 25th, 2003, 14:48
  2. Vbox 4.3
    By fla in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: April 15th, 2002, 17:08
  3. help me Vbox 4.3
    By Neutrino in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: March 5th, 2002, 02:48
  4. Vbox 4.6 ???
    By Dissektor in forum Malware Analysis and Unpacking Forum
    Replies: 4
    Last Post: January 24th, 2002, 05:39
  5. Vbox 4.5
    By lucita in forum Advanced Reversing and Programming
    Replies: 7
    Last Post: December 4th, 2000, 10:59

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •