View Full Version : hi
-=elgura=-
October 28th, 2001, 08:52
yes a nice tutor indeed..
but i'm looking for a way to unpack it from sales agent.
but you gave me some good hints in your tutorial... tanks alot.
see ya
EtErNaL_L0ser
October 28th, 2001, 12:26
Yuo want the hard way.Heheheheh +tsehp was kindly published my essay
http://www.woodmann.net/fravia/eternal_Aspack_211.htm
evaluator
October 29th, 2001, 07:29
Hi -=elgura=-!
You started new thread for old problem?
If I correctly understand, you want manualy convert file FLASH*.TTY to
working file FLASH*.EXE? Or no?
-=elgura=-
October 29th, 2001, 16:08
yes it's right.. i did. but it was a mistake, i took the wrong button.
and the thing i want is to find a way to "unpack" rsagent from the exe.
i've read some tutorials about it and i got me some ideas that i'm working on.
if you got some trick that will help me on my way.. let me know.
see ya
evaluator
October 30th, 2001, 02:55
Hi -=elgura=-!
I have not FLASH 4, but I analyzed (only now) this Macromedia products:
1. Authorware 5.2
2. Director 8.5
3. fireworks 4
4. UltraDev 4
5. Freehand 10
All have same protection and this protection is:
FINAL PLACE OF STUPIDITY!!!
I found in 'ProgName'.TTY files little part at start of program code encrypted.
But they will be decrypted in memory when you run program!
So all you want is:
Dump process 'ProgName'.TTY, copy from dump to 'ProgName'.TTY this part of code(replace)
and rename 'ProgName'.TTY to 'ProgName'.EXE!
Now you have full version of program. Enj...
Tools needed: some memory dump-able program and some hex-editor.
***END OF SUPER TUT ABOUT REVERSING ALL MACROMEDIA PRODUCTS***
Or you want something else?
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.