Log in

View Full Version : Asprotect trick?


banshee
August 13th, 2002, 19:43
I tried to unpack JavaSMS
h**p://www.vd-soft.com/downloads/JSMS124.zip
It is ASprotected, don't know the version. I've found OEP, dumped and rebuilt imports using ImpRec. Everything is fine but there are errors: "Access violation. Memory cannot be written (or read)". I traced that places, there is something like "mov [eax], edx" and eax is not valid address. In original program everything works fine. Is it asprotect trick? Or I have a problem with hands?

banshee
August 13th, 2002, 22:08
Tried to unpack another program. The same problem: execution fails in function System::SysGetMem(int). Think this is some trick with resources. Any ideas?
Here the program:
h**p://www.vd-soft.com/downloads/HID4JSMS.zip

evaluator
August 15th, 2002, 14:34
nothing new..
at 5006AC is pointer[address of mem] to your hardware ID in asspr module.
Look in that address & copy that bytes into EXE,
then rewrite that address at 5006AC to your.

PS.
you must read tutorials about asspr unpacking. For example, about AAtools.

banshee
August 17th, 2002, 17:10
Thanx
It was lazy way, I'm sorry. I should go now to learn, learn, learn Anyway thanx.