With what is this packed? [Archive] - RCE Messageboard's Regroupment

View Full Version : With what is this packed?

Unregistered

October 15th, 2001, 06:57

h**p://www.cabbala.net/lahna/lahna111.exe

Wdasm8.9 gets nothing out of this...
I have tried with softice, but because of a lack of skills, failed.

Anyone know with what is this packed?
Dede cannot do anything with it.

I have run some FIle analysers on it, but the all say unknown.
Please help me.

nofurs

October 15th, 2001, 08:03

Heya,
The program is not packed.
I suggest you read tutes on using DeDe
http://www.balbaro.com/dafixer/papers.html
cya

Unregistered

October 17th, 2001, 05:41

Well I've read most of those, and looked trough the rest of them quickly a minute ago (Well, fast enough to see if they're of any use to me

)

They don't help me. Well, I'm not sure If that link gives you the same version I have, but mine is packed. (Well, according to my knowledge, at least.)

What else can it be, if there's nothing to be seen with Wdasm? The Author changed some bytes? what? Tell me some reasons that could be behind this.

I must check that latest version, although I think it's the same as mine.

Thanks is advance.

Unregistered

October 17th, 2001, 10:56

hi u must have 2 winDASM versions 1 for VB and 1 for Borland delphi . windasm patched for VB has some probs to display delphi stuff

best regards

dyci

hobgoblin

October 17th, 2001, 13:45

Hi there,
The prevoius poster is right. If you disassemble a delphi with the "wrong" version of W32dasm, you will run into problems.
About the program:
It is not packed, but all the text strings you will see is in Finnish. But if your only looking for an easy way to crack it, try enter a phony name\serial and do a bpx hmemcpy in softice...

LaptoniC

October 18th, 2001, 08:55

Source code is in delphi.

Code:



k:=-1;

a:=1;

for i:=0 to length(name) do

begin



j:=ord(name[I]);

j:=j shl a;

a:=a+1;

k:=k+j;

end;

key:=variant(k);

Hope it helps

Unregistered

October 30th, 2001, 06:32

Thanks for your answers, but:

LaptoniC:
Well, I tried to make a Turbo Pascal program from that source you gave me, (with some adjustments of course) and it does produce a number, but it's not the reg-num. At least the prog won't accept it. Should I use Delphi, isn't it just (/nearly) the same, just in DOS?
Does it have an effect if I declare key as an integer and not with this : key:=variant(k);? I couldn't make it work (in tb) like that. So I just used (in var section) k : integer and then later on key := k . So what is the prob? Or wtf is that source of yours?

hobgoblin:

Well, how can I be sure? The only vb - "patch" I have is the program VBRefs, which processes the alf - files. But this isn't the thing you mean, is it? Where could I get this "delphi" - version? I assume that mine is vb-ver. because I see NO string references at all. It would be nice to have those damn Refs.
So I'm after the Delphi-WDasm-version now.

(And just in case mine is not patched for vb (I haven't pacthed it myself, do they make 2 diff. versions, or is this a reverse-engineering-thing of somekind?), where could I get the _real_ vb-patch?) (Not VBRef, if that's not what ppl mean with that patch.)

Thank you all again