Log in

View Full Version : tElock 0.98b1, 7 renamed sections, 2x CRC32 poly


Fsound
May 11th, 2004, 01:23
Hi there,

I am trying to debug a DLL-based dongle-emulator because I want to know, how it works.

It's protected with tElock 0.98b1 (information by PEID).
I am using the latest beta of Olly. This allows me to load DLLs.
OllyScript & TeLock-Script by "loveboom" have helped me to find the OEP: 64AE0F

Then I have dumped the file ... 499kb => 1,84mb
Next I tried to load the program with the unpacked dongle ... does not work.

Now PEID tells me that it's no more packed BUT 2x CRC32 poly inside :-(

Code:

CRC32 (poly) : 001D73BD : 005DA98D
CRC32 (poly) : 001D7A12 : 005DB012


Hey, let's crack the CRC-check
Then I have loaded the DLL in w32Dasm and wanted to go to the reference-address ... but it does not exist.

Damn, what am I doing wrong?