semsen
November 24th, 2002, 02:21
I am reasonably new at the cracking stuff, and have only just started learning about unpacking, procdumping...etc
Recently, I have tried to crack Winace 2.11. It is protected by a (apparently modified to make the procdump unpackers fall over) version of ASPack.
Using SoftIce, I managed to trace to the point when code was uncompressed, and found the entrypoint as well. I dumped (using procdump) the memory contents just before it jumped out of the unpacker code, modified the entry point (and the jmp eip), and then proceded to actually cracking the 30-day limit (which was a piece of cake).
All this is brilliant, i'm happy, as the prog works fine (unpacked prog with no limit), or so i thought!
Strangely, after a few times of running the program, the executable stops working fine, throwing every time an (unrecoverable) exception when loading.
I have been completely unsuccesful at figuring out why this is. Spending hours tracing through code, it looks like it is trying to jump to a memory location that isnt winace's, but i'm really not sure!
I know i am just a newbie compared to all the people out there, and i must be doing something wrong, but don't know what that is. Has anyone experienced this type of problem? Can anyone help?
And, yes, i DO know there are millions of s/n's out there that will register the prog without trouble, but i'm actually doing this for fun!
Recently, I have tried to crack Winace 2.11. It is protected by a (apparently modified to make the procdump unpackers fall over) version of ASPack.
Using SoftIce, I managed to trace to the point when code was uncompressed, and found the entrypoint as well. I dumped (using procdump) the memory contents just before it jumped out of the unpacker code, modified the entry point (and the jmp eip), and then proceded to actually cracking the 30-day limit (which was a piece of cake).
All this is brilliant, i'm happy, as the prog works fine (unpacked prog with no limit), or so i thought!
Strangely, after a few times of running the program, the executable stops working fine, throwing every time an (unrecoverable) exception when loading.
I have been completely unsuccesful at figuring out why this is. Spending hours tracing through code, it looks like it is trying to jump to a memory location that isnt winace's, but i'm really not sure!
I know i am just a newbie compared to all the people out there, and i must be doing something wrong, but don't know what that is. Has anyone experienced this type of problem? Can anyone help?
And, yes, i DO know there are millions of s/n's out there that will register the prog without trouble, but i'm actually doing this for fun!