Сейчас на форуме: rmn (+1 невидимый пользователь) |
![]() |
eXeL@B —› WorldWide —› Help @ ASProtect 2.1x SKE unpacking |
Посл.ответ | Сообщение |
|
Создано: 25 января 2008 05:33 · Личное сообщение · #1 My real love lies in armadillo as it seems, aspr with that nasty SKE at the end just doesnt work for me. I tried very hard to manually unpack it but the VM opcodes and IAT restauration seems to be over my head. (Armadillo is a piece of cake compared against aspr - thats what i have learned the last 8 or 9 days (!)) Even with the help of stripper 2.13 and some chinese (?) scripts i could not get it done so I am almost giving up on it. Could someone please be so kind and unpack this exe file rapidshare.com/files/86393713/pa.exe.html (original download (setup) via tinyurl.com/3benxw) and (if by any means possible) give me some hints where I can find some plain-english explaination of the VM opcode handling? i read a lot of discussion in arteam forums (some -for me- very complicated tutorial overview of the VM was posted there) but it seems I need much more and different sourced infos to get it into my head somehow.. thanks in advance for your help, its really greatly appreciated ![]() |
|
Создано: 25 января 2008 07:04 · Личное сообщение · #2 |
|
Создано: 25 января 2008 17:47 · Личное сообщение · #3 Tha nks PE_Kill, that solved some of my problems. Nevertheless there seems that the unpacker missed some vital memory area, the app throws a memory_access_violation after adding some pictures and hitting start. Besides that it seems that it has some strange way of using the GetModelInformation api results so that it just throws "Unknown processing mode" errors as soon as it is running in registered state. Very weird app - there are only a very few checks that correspondent to the aspr layer. on startup it check if it is registered and then - depending on the getmodelinformation api result allows to load lens configurations (.dll files). and right before saving a result it checks the getmodelinformation api again and depending on that should skip the trial watermark and write the resulting image to disk. I cannot get it to skip that damn watermark, even patching the result codes back into the running trial version does not help. any ideas? maybe you got some time to have a look at it and point me into the right direction? ![]() |
|
Создано: 26 января 2008 04:49 · Личное сообщение · #4 |
![]() |
eXeL@B —› WorldWide —› Help @ ASProtect 2.1x SKE unpacking |