Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > .NET Reverse Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Thread Tools Display Modes
Old 01-30-2009, 07:15 PM
y33t y33t is offline
Junior Member
Join Date: Jan 2009
Posts: 1
Smile Interesting Case

Hi everyone,

Cool site cool content cool people ! Greetings from Istanbul.

I have an application (App.exe) with environment files below.
File monitoring toolbox couldn't capture it but manual checking gave positive relationships between ;

App.exe - main application
SKCLNET.dll - returns a value to be used in startup of App.exe
AppUtils.dll - various stuff but not related to startup serial prompt
ClAll.dll - wtf is this anyway

These are the files needed to view startup serial prompt.
My concern is that when I do patch 2bytes of the code (actually doesnt matter the size, problem remains) patched exe gives a generic 'inconvenience' error and wont run.(couldnt grab the error code yet but same error occures when removing one of the files above).Form asking for serial in App.exe calls ShowTriggerDlg() from SKCLNET.dll which finally returns ValidateorNot() to App.exe.

Something catchy about this is that it does not make any difference if I kill serial prompt from App.exe or SKCLNET.dll, either way program does start and end with a generic error.I tried lots of different bytes to get over it but no luck.I checked if there is an external function or file just to validate integrity of these files - but no clue.

Application is not a sophisticated one, maybe some not well-know protection (Protection Plus?) technique is used.And yes you are right I do suck at .NET stuff

Any suggestions are welcomed.
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.