I've easily bypassed the registration on versions 1.6 and 1.7. (no unpacking needed)

1.8 may be over my head.

wdasm loads nothing.

no unpacker i use identifies it...

should i even bother?

you can get 1.8 here:

h**p://www.pocketpccity.com/software/files/SetupPop3Hotc.exe

v1.8 has been replaced by izymail @ h**p://www.izymail.com

Hello,

FileInfo 2.5 report it as packed with ASProtect 1.22

Regards
FoolFox

Hi, my first post here

im newbie too, and i hope to learn something from u




i've d'ling the pop3hot and analized with fileinspector xl

it said its EXE Protector 1.37a


greetings! & be good

(sorry for my english is very poor )

FoolFox:

Thanks dude! You are correct! I found FI 2.5 (i had 2.49a) and got the same result. I also downloaded asprotect and ran it on the file, and it confirmed it was already protected.Now back to work ... :P

KArlitos:

I got the same result, its a dead end. I'll update on progress. If ur a newb, try getting pop3hot v1.6 or 1.7...they are extremely easy to bypass...even i did it, lol.

from what i've been reading asprotect 1.2 is a tough bean to crack. I've taken a detour with my target and deduced the product id is a combination of getvolumeinfo of the volume serial number and the size of the drive. I started reversing the algorythm that the target used to get the product id from the getvolumeinfo stuff. I guess i thought maybe the reg code (to be placed in the registry) would be same getvolumeinfo (in the correct form) and the target would use the same algorythm to match the product id from it.

Anyone have any opinions whether this approach has merit? Right now i have a xcel spreadsheet coded with vba (with some nice looking forms i might add :P) to help me..I'm probably 25% done.

TIA>

Hello,

that look like a trial and error approach... , well, maybe
not the straight way but sometime it can give quick
results... up to you to see if you are willing to take time
for it...

You said :

>I started reversing the algorythm that the target
>used to get the product id

so, that's mean you have dumped the exe and got
a view of the checking routine also... is the exe
working ? using tools like RegMon in this case should
point you to the entry where he read the key, and
check it's format, if he read the key from registry...

Regards
FoolFox

'file not found' 48 pffffff

maybe after de-aspring this target u should check out it's dependencies (see win/system....Encrypt6.ocx (a dll)) and use

URL :-

http://www.devpower.com/encrypt/

hi again

after many attemps to crack (and reads tutors), think is time to ask for help, target is the same above (hot3pop),

i try to using symbol loader to load the prog, but it dont break

i cant dissasemble it, wdsam32 hangs up, then i have read i must change c000040 to e000020 characteristic with pe-editor (procdump), but it still hang (when i try to run the modified exe it say file corrupted!)

then it try to follow another tut. from
http://www.lunarpages.com/codeinside (how to break into oep int03) but it dont break

whats wrong, someone please help! i need a little push

sorry for my english
and thanks at all!

me.

Hey, Karlitoz!

You don't really need to break at start, that is, the info you need comes later and is very well documented on this site.
Just look in the unpacking section in some of the recent aspr threads and you'll even find tips on what to search for...
Aspr is selfchecking so it will be really hard to make changes before you unpack/dump.

disassembling aspr is a pain and wont acomplish much because it is packed too. :P

I was VERY respectful (afraid) of aspr before. I started instead with a good dose of "ordinary" cracking, learning asm/tools, and now that I've done some aspr, I think it's not that hard, really... ;P
(I had ofcourse read a lot and there are exceptions...)

What's extremely vital; is to protect softice from aspr tricks!
There are info on that here and in tuts/tools on the net also.

I'll be happy to help you but you need to SEARCH, SEARCH, READ, READ, READ first and THEN experiment!

/Manko