Hi Guys

Some days ago I intended to do a small challenge that consisted manually unpack a program packed with Neolite 2.
Everything run well, i used a technique described by CoDe_InSiDe (my gratefulness) but the result was not the expected.
The unpacked file was perfect. I have changed 2 sections in Charecteristics C0000040 for E0000020. I executed the program but an unknown error " this program have done an illegal operation and it will be finished " and later another box appears with the error restrictions " This operation was canceled due to existent restrictions in this computer ".Can you tell me what's going one ? Why i can't run the app. with the unpacked file? Are there any antidesassembler protection?

Thank you
Melvill

Err...... when the unpacked program didn't run, how do you say that the unpacked program was "perfect"? U mean, you found the exact details written by Code_Inside for NeoLite 2?

Signed,
-- FoxThree

Sorry,

yes i found the exact details written by Code_Inside.I can disassembler with W32dasm with string ref. and strange address with many NOP's.

The App is CubaseDemoSX 1.02

thnks for any help to understand this protection

Melvill

Melvill:

Just dled it and unpaxed it and running fine. Why don't the Steinberg guys fix the crash when the app is shutdown? Oh well....

Okey, before we can help you:

(1) What was the OEP for the application you found?
(2) How did you dump the code from memory?

Signed,
-- FoxThree

Hi,
Maybe he didn't change the correct the OEP using peditor .Just my 1/2 cents :P

Hi foxthree and esther

Thnks for your help i had a mistake on EP. now works fine

Thnks guys