foxthree
March 11th, 2002, 20:22
Hi Evaluator:
I wanted to learn the size protection trick in CommView. You said that it is present in CV 3.3. So I dled CV 3.3 and attempted to unpack.
I got the OEiP: 0061CFA4.
Like +splaj said this version of ASPR seems to be different! Anyways, I managed to build the IAT. However, my IAT and your IAT length is different.
Evaulator => 26C
Mine=> 3B0
However, I pasted mine in the CV dump and
it starts perfectly! No size checks and no anti-patching code in this one. Am I correct?
I'm attaching my rebuilt IAT.txt for your reference.
Signed,
-- FoxThree
PS: BTW, this version of ASPR is surely
different in some way! I'm not able to pin point how...
I wanted to learn the size protection trick in CommView. You said that it is present in CV 3.3. So I dled CV 3.3 and attempted to unpack.
I got the OEiP: 0061CFA4.
Like +splaj said this version of ASPR seems to be different! Anyways, I managed to build the IAT. However, my IAT and your IAT length is different.
Evaulator => 26C
Mine=> 3B0
However, I pasted mine in the CV dump and
it starts perfectly! No size checks and no anti-patching code in this one. Am I correct?I'm attaching my rebuilt IAT.txt for your reference.
Signed,
-- FoxThree
PS: BTW, this version of ASPR is surely
different in some way! I'm not able to pin point how...