Waraxe IT Security Portal

ThoR · Regular user

im somewhat lost as of "where" to post this, so i urge any moderator to move this subject if it's unproper here, or at all.

I've crafted a loader for EGB 1.4, wich overruns the built-in 3 minute limitation. i won't release that obviously. this post is mainly to somewhat "warn" the author it is not only possible, but very easy to bypass the protection on EGB.

problem is the count is made only in 1 place, in a very straightforward way, and the packer fails to prevent code analisys, as it unpacks the entire executable and leaves it unpacked all the time in memory.

i don't want to be obvious enough to pinpoint the location, and not scarce enought to sound like a wannabee, so in MD5.exe, you will be looking for a call to GetTickCount, and a few lines below it the magic will be there.

i won't get into detail as in how to debug the code, etc.

i want to avoid getting flammed, that is the very reason for me posting this here, and not in InsidePro forums, as i've seen they're quite regular around here. well that, and the fact i allready have an account here, and i don't have one there.

If this information wasn't supposed to be here, and / or hurts anyones feelings, i am sorry for posting and please remove it

lenny · Valuable expert

Thank you for the heads up, im sure the world needs more people like you! Although, saying this, It would be probably a better idea to post this on the authors website as it is more likely to be seen by him Wink

ThoR · Regular user

i'll prolly do so, i was very short on time last night.

thanks ^^

kuku · Beginner

Thank you very much