|
| Author |
Message |
BOSCH Special Member



 Joined: 20 Oct 2008 Posts: 143 Location: Somewhere outside!
|
|
 |
Hi guys,i have patched an aplication:
| Your download link: |
| Code: |
| http://www.aimersoft.com/video-converter.html |
|
succesfully!It is no so difficult,aplication is fully registered and no registration nag,but when i open it after 10 seconds aproximately close!Which api can cause this?I want say also that inside debugger aplication works perfectly!Can help me someone?
Because someone bilieve that i don't do anything about patch,the patch that i make is:
| Your download link: |
| Code: |
| http://rapidshare.com/files/232431361/VideoConverter.rar.html |
|
It is not packed.so you can see what i done...  |
_________________
|
|
Date Posted:Tue May 12, 2009 6:31 pmThanks: 62Thanked 7 Times In 6 Posts
|
| Author |
Message |
loekie Special Member



 Joined: 29 Nov 2006 Posts: 346 Location: Brits:South Africa.
|
|
 |
| Uhmmm....ya. Your exe you modified is not good. If you run it you will notice your "File", "Edit" and "Help" buttons are missing. You must dig a little deeper. Try to lock the 30 day trial and then get rid of the nag. |
|
|
Date Posted:Wed May 13, 2009 4:48 pmThanks: 1Thanked 76 Times In 38 Posts
|
| Author |
Message |
BOSCH Special Member



 Joined: 20 Oct 2008 Posts: 143 Location: Somewhere outside!
|
|
 |
Hi loekie!Believe i don't see that this buttons are disable!I patch it this time right!When i do that i will tell you...  |
_________________
|
|
Date Posted:Thu May 14, 2009 10:07 amThanks: 62Thanked 7 Times In 6 Posts
|
| Author |
Message |
Cutybabie Member



 Joined: 27 Mar 2009 Posts: 29
|
|
 |
| I also find the string 'CheckAppMd5' by olly anaylse,does it check the execute file modification? |
|
|
Date Posted:Thu May 14, 2009 12:54 pmThanks: 4Thanked 1 Times In 1 Posts
|
| Author |
Message |
loekie Special Member



 Joined: 29 Nov 2006 Posts: 346 Location: Brits:South Africa.
|
|
 |
You can try this exe. I locked the trial on 30 days. It is very important to run the exe under the original name. Don't rename it, otherwise it will ask for registration without the option to run the program. (you can try it! very interesting.) It is important to note that you still had to fix the 3 minute conversion time and the "evaluation" watermark.
| Your download link: |
| Code: |
| http://www.mediafire.com/file/hje2mcj0trm/exe.rar |
|
EDIT: Hi Bosch. Sorry man!!! There is not much wrong with your exe. I re-named it and that is why the three buttons are not there. If I over-write the original file it is running with all the buttons in place. The only problem you have is that it exits after 10 seconds. That can be fixed by jumping the MD5 check. Anyway, have a look at my exe and give it a try. (You can re-name the fixed exe and run it, then you will see what I mean).
Sorry again, this was my mistake. |
|
|
Date Posted:Thu May 14, 2009 8:01 pmThanks: 1Thanked 76 Times In 38 Posts
|
| Author |
Message |
BOSCH Special Member



 Joined: 20 Oct 2008 Posts: 143 Location: Somewhere outside!
|
|
 |
Sorry loekie also from me because i don't tell you to remane in the original name the exe from the beginin!Also,yesterday night i saw it again and believe me is the only way to patch this aplication,eax or ebx must be 1!Also i found that the api that close aplication is terminateprocess!Because when i activate in olly advanced plugin this setting aplication is still open!Now the question is how we can patch terminateProcess?
EDIT:loekie all it is OK!!!I patch just the MD5 LNZ and all works PERFECT!!!!!But i want to tell that your exe it is not open the aplication.It show me just the register dialog.Correct me if i am wrong...
This is the my finally patch and full registered!
| Your download link: |
| Code: |
| http://rapidshare.com/files/233219311/Patch.rar.html |
|
 |
_________________
Last edited by BOSCH on Fri May 15, 2009 10:51 am; edited 1 time in total |
|
Date Posted:Fri May 15, 2009 10:22 amThanks: 62Thanked 7 Times In 6 Posts
|
| Author |
Message |
BOSCH Special Member



 Joined: 20 Oct 2008 Posts: 143 Location: Somewhere outside!
|
|
 |
| Cutybabie wrote: |
| I also find the string 'CheckAppMd5' by olly anaylse,does it check the execute file modification? |
Yes Cutybabie,you was right!!!!The MD5 close the aplication because search for patches! ;)But i can't understand,when i start to reverse this aplication i scan it with peid,but it not find anything!...  |
_________________
|
|
Date Posted:Fri May 15, 2009 10:34 amThanks: 62Thanked 7 Times In 6 Posts
|
Astalavista Forum Index :: Free Talk About Cracking :: Strange situation...!
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|