Page 3 of 3 FirstFirst 123
Results 31 to 38 of 38

Thread: Asprotect Debugger v0.99b

  1. #31

    Lightbulb

    what is ( stolen bytes ) means ?
    can some1 plz explain ?
    thx

  2. #32
    Hi!

    Stolen bytes:
    When aspr packs a program he will strip it of the first few instructions and put them in it's own space and run them there and then jump to following instruction in proggies space...
    This is done to complicate things for us...
    It was too simple, so NOW he has put lots of crapcode in ther to confuse us and he has changed the code a bit totrick us and also he emulates part of code that is after those stolen bytes, so we end up inside some procedure, complicating things further... blabla...

    btw, I did stupid dirty update to proggy to get tempOEP on new aspr, it will break if variations occur, but I had no time to make proper code...

    http://www.kommunicera.umea.se/hemma/mawiklund/

    /Manko

  3. #33
    Feisu
    Guest
    thanksbut have one app packed by aspr.detected it.plz you have a see:P

    SpeedCommander 9

    http://www.sp-download.de/sc9/sc9.exe
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #34
    Hi!

    Hehe, I had forgotten about aspr-packed dlls...

    Actually they run before the proggy, so I just put my patching routine when process was created...

    I also left it where it is because apps switch context as they are being loaded... hmm...

    Still, asprdbgr, doesn't debug the target as it should. It stops before it has displayed resolved api... hmm...

    I'm working on it.

    /Manko

  5. #35
    Hehe... stupid me. I had "SuperBPM" (a variant...) on so my app couldn't do BPM's...

    Anyway, had to do some other things...

    Go get it!

    http://www.kommunicera.umea.se/hemma/mawiklund/

    /Manko

  6. #36
    Ehrm... I accidentally killed my app... Had to do stupid sollution...
    (If I have time, I'll try and fix this...) (Could do a msgbox-question, but that feels wrong...) (Hmm.... or maybe just check exe... (Will fix later!

    /Manko

  7. #37
    Computer_Angel
    Guest

    help

    Can anyone explain to me:

    What is the dip-table, and what is it used for ?
    While using the aspr debugger, the console show:

    Dip-Table at adress: BF7AB4
    0 5771B8 0 0 5771CC 0 0 5771E8 5775E0 577614 0 0 0 0

    Is there any tuts for aspr debugger ? I try to use it but don't know how to unpack :-D
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #38
    Come on guy:

    This is why we have a "search" function on the Board. Press the search button at the top of the Forum, go to the left hand side and enter "aspr + dip" and you will find several interesting entries. Also try "asprotect + dip" and anything by +Spl/\j and aspr and/or asprotect. There's lots of material here, just go do some of the work of actually looking yourself. Then, after you read up, then ask questions.

    Regards.
    JMI

Similar Threads

  1. Asprotect Debugger ...
    By Manko in forum Malware Analysis and Unpacking Forum
    Replies: 30
    Last Post: February 17th, 2004, 18:55
  2. Asprotect 1.2
    By SilSaLaMaTa in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: June 18th, 2002, 11:55
  3. Asprotect 1.4 !!!
    By +SplAj in forum Advanced Reversing and Programming
    Replies: 6
    Last Post: January 13th, 2002, 16:37
  4. Asprotect again
    By LaptoniC in forum Advanced Reversing and Programming
    Replies: 3
    Last Post: September 20th, 2001, 06:15
  5. Asprotect V1.3?
    By LunarC in forum Advanced Reversing and Programming
    Replies: 19
    Last Post: August 23rd, 2001, 00:00

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •