Log in

View Full Version : hi


-=elgura=-
October 28th, 2001, 08:52
yes a nice tutor indeed..

but i'm looking for a way to unpack it from sales agent.

but you gave me some good hints in your tutorial... tanks alot.

see ya

EtErNaL_L0ser
October 28th, 2001, 12:26
Yuo want the hard way.Heheheheh +tsehp was kindly published my essay

http://www.woodmann.net/fravia/eternal_Aspack_211.htm

evaluator
October 29th, 2001, 07:29
Hi -=elgura=-!

You started new thread for old problem?
If I correctly understand, you want manualy convert file FLASH*.TTY to
working file FLASH*.EXE? Or no?

-=elgura=-
October 29th, 2001, 16:08
yes it's right.. i did. but it was a mistake, i took the wrong button.

and the thing i want is to find a way to "unpack" rsagent from the exe.

i've read some tutorials about it and i got me some ideas that i'm working on.
if you got some trick that will help me on my way.. let me know.

see ya

evaluator
October 30th, 2001, 02:55
Hi -=elgura=-!

I have not FLASH 4, but I analyzed (only now) this Macromedia products:

1. Authorware 5.2
2. Director 8.5
3. fireworks 4
4. UltraDev 4
5. Freehand 10

All have same protection and this protection is:
FINAL PLACE OF STUPIDITY!!!

I found in 'ProgName'.TTY files little part at start of program code encrypted.
But they will be decrypted in memory when you run program!
So all you want is:
Dump process 'ProgName'.TTY, copy from dump to 'ProgName'.TTY this part of code(replace)
and rename 'ProgName'.TTY to 'ProgName'.EXE!
Now you have full version of program. Enj...
Tools needed: some memory dump-able program and some hex-editor.

***END OF SUPER TUT ABOUT REVERSING ALL MACROMEDIA PRODUCTS***

Or you want something else?