Hello my Friend Sup.....!

Go to Offset 0056E068 in Ollydebugger (Push EBP), replace in C3 Return and have Fun!

Dielbach said:

Hello my Friend Sup.....!

Go to Offset 0056E068 in Ollydebugger (Push EBP), replace in C3 Return and have Fun!

thanks very much Dielbach, file was dumped, OEP found, IAT fixed and program
runs like a swiss watch

can you please tell me how can i find that address in any execryptor target ?

thanks

C3 removed the Nag and Trial Limit in your Unpacked.exe!

thanks Dielbach

does that mean that the file can be unpacked without doing this patch ??

thanks

Here ist the Unpacked Patched exe:

http://www.sendspace.com/file/dfivyh

thanks but i already fixed the file and now works

thanks for your help

No Problem!
You have some Problem's, tell me!

thanks man

hi again Dielbach

i want to ask you again about Execryptor

i have some programs which is packed with it, however after upacking successfully
they show a message 'file corrupt' and the program close after a while

how can i patch the CRC or the 'the file corrupt' check ?

thank you

API Create FileA, GetFileSize usw.

sorry, i don't understand what you are saying

can you explain it ? - thanks

Interessting stuff.
Maybe Dielback can help us with Advanced Virtual Com Port?

What is the Problem with the App Advanced Virtual Com Port ??

Give me a link.

The Problem is EXECryptor!

Please: http://www.sendspace.com/file/a3sf9w

hi dielbach

the problem here is not EXECryptor
we already unpacked it using Unpacker by RSI

william wonders if you can help us in cracking it...this program is a really nasty thing

anyway, the program link is here

So, look at Adress

004082CC . 50 PUSH EAX
004082CD . E8 34610000 CALL 0040E406 ;
004082D2 . 8B86 C8010000 MOV EAX,DWORD PTR DS:[ESI+1C8]
004082D8 . 83C4 0C ADD ESP,0C
004082DB . 85C0 TEST EAX,EAX ----------------- Here!!
004082DD . 75 68 JNZ SHORT 00408347 ; Avcp_u.00408347
004082DF . 68 0BE00000 PUSH 0E00B


Good Luck!

hi dielbach

thanks, but i already found this line

if you forced the condition at 004082DD to JMP, the program will never expire

but this is not the problem

the problem is that program can only MAKE 2 COM PORTS in the trial version, and i also overriden the message the tells you that, so the program will just put a new port image, but the port is not working(unlike the first 2 ports,when you click one it says it's opened or closed, the new one will say please choose a port)

and another thing, did you notice that the program gets the information
from a windows service file called 'AvcpService.exe' ??
this file is suspicious to be the file to be cracked
(if you attached it to olly and paused it then run 'Avcp.exe', it will wait for the
service to give something....)


this is the whole thing, the REAL HARD THING

Is the Message Cannot add port.Error Code 06.... ???

The program does not run properly for me.
Sorry.

00406C20 --------75
00406CA3 --------74

the new Port is in the Program.

Sorry, the Program Kill's my E-mail Account on my System and so only!
Shit.

ok, thanks for trying to help, Dielbach

The next target once again like to.

+ 0 Dielbach pm 06 Jan 2010, 14:44 ! " #
Is the Message Cannot add port.Error Code 06.... ???

Yes it is. It means the trial period is over.
Looking for a way to reset the trial days. Trial-Reset isn't working.
Keeps me pretty busy this nasty program, well it has'nt been cracked ever...

that service file....

The files are just not completely unpacked is it? Isn't there a plugin/program
to re-Line-up the jumps & calls.
This is really execryptor at work...

Is there someone who can give me more info on that?

HI
i have problem`s with unpacking of execryptor
i used the Unpacker.ExeCryptor.2.x.x.RC2 for the litle program but when i wont to fire it up in ollydbg,
olly terminating the process and i cant finish it.

i think it was an crc check but im not sure
any one can help me

here is the link
link

many thanks