Log in

View Full Version : process patcher (r!isc)


WoZX
August 22nd, 2001, 01:50
i have a packed program and have successfully cracked it manually using TRW2000 by patching the unpacked program in memory.

I decided to use r!sc process patcher to patch it everytime it runs, but it displays an error, 'process error: 15'.

any idea ?

thx.

thenite
August 22nd, 2001, 07:25
Hiya,
Correct me if I'm wrong, but I think that is not an error
of the process-patcher.
Your program is packed with ASProtect, which
CRCs the unpacked memory. Your loader patches the code
as soon as it is unpacked, so aspr detects it and
displays the nice "error no.15".
Try this trick:
The prog will store its modulehandle in some memory
of the data-section and this happens after the crc check.
Now you just have to make the loader to wait until
the modulehandle is written and then apply the mempatch.

The code could look like this:
push 0
call GetModuleHandleA
mov [00500000], eax

script for rpp:
p=500000/00,00,40,00/00,00,40,00: ;waits until handle is
;written and then goes to 'real' patch
p=crackaddr/origbytes/patchbytes:

hope this helps
cu

WoZX
August 22nd, 2001, 21:31
thx, but i think the program is packed using EXE Protector 1.37a, which currently does not have any unpacker available.

After searching and testing several process patcher, I found Process Patches 3.93 found in protools.cjb.net adequate, unfortunately it does not create .exe file, but it doesn't matter as long as it works