little boring info..

following information is from asprotect.dll, for the data attatched to the end of aspr section

dw 3E9h     ; decrypt info for call / jump (e8 / e9)
dw 3EAh     ; crypted_entrypoint_decrypt_key
dw 3EBh     ; file failed crc check..
dw 7D1h     ; trial_days
dw 7D2h     ; time trial string
dw 7D3h     ; ?
dw 7D4h     ; ?
dw 7D5h     ; unregistered version string?
dw 7D6h     ; ?
dw 0BBBh    ; stolen keys / black listed keys (10h bytes per key.)
dw 0BBDh    ; crc_size / how many bytes to crc?
dw 0FA1h    ; (80h, could be some rsa key thing?)
dw 0FA2h    ; (80h, could be some rsa key thing?)
dw 0FA3h    ; reg key to check for serials
dw 0FA4h    ; ?
dw 1389h    ; crypted mangled rdata
dw 138Ah    ; asciiz decrypt key(s)
dw 138Bh    ; rdata / asciiz id byte info
dw 1771h    ; aspr license info
dw 1B59h    ; crypted_entrypoint
dw 1B5Ah    ; file_crc / also used to decrypt entrypoint
dw 1F41h    ; new_hook / null_sub / registered = decrypt code block
dw 1F42h    ; new_hook / null_sub / registered = encrypt code block
dw 1F43h    ; new_hook / ??
dw 1F44h    ; new_hook / db 'registered users name',0
dw 1F45h    ; new_hook / trial days, and days left
dw 1F46h    ; new_hook / ??
dw 1F47h    ; new_hook / ??
dw 1F48h    ; ... 1f49,1f4a & 1f4b too (aspack.exe v2.11)
dw 2329h    ; ??


data_dump.bin from asprotect.exe (v1.1)

dw 0001h
dd size_of_this_data

dw 0fa4h    ; id
dd size     ; size of following data
db ?,?,?,?  ; dunno what this value is

dw 07d1h
dd 4
dd trial_days   ; 1eh

dw 07d2h
dd size
db '30 day string',0

dw 07d5h
dd size
db 'unregistered version',0

dw 1f41h
dd 4
dd rva_new_hook     ; if this hook isnt hooked, asprotect causes an exception

dw 1f42h
dd 4
dd rva_new_hook     ; dunno about this hook though..

dw 1f44h
dd 4
dd rva_new_hook?    ; or this one..

dw 0fa1h
dd size (80h, could be some rsa key thing?)
db ? dup (?)

dw 0fa2h
dd size (80h again)
db ? dup (?)

dw 0fa3h
dd size
db 'app title?',0

dw 2329h
dd size
db ? dup (?)

dw 1771h
dd size
db 'aspr license info',0

dw 138bh
dd size
db ? dup (?)    ; rdata id byte info (see rdata_v1_09.asm)

dw 138ah
dd size
db ? dup (?)    ; asciiz decrypt key(s)

dw 1389h
dd size
db ? dup (?)    ; crypted mangled rdata

dd rva_of_thunk
db lib_id_byte
db 'libname',0

db asciiz_id, size_of_asciiz, 'crypted asciiz'
...
db asciiz_id, size_of_asciiz, 'crypted asciiz'

dd rva_of_thunk
db lib_id_byte
db 'libname',0

db asciiz_id, size_of_asciiz, 'crypted asciiz'
...
db asciiz_id, size_of_asciiz, 'crypted asciiz'

dd 0

dw 1b5ah
dd 4
dd file_crc ; also used to decrypt entrypoint (if its not NULL)

dw 1b59h
dd 4
dd crypted_entrypoint

dw 03e9h
dd 2
db ?,? ; decrypt info for call / jump (e8 / e9)

dw 0bbdh
dd 4
dd crc_size ; how many bytes to crc?

dw 03eah
dd 4
dd crypted_entrypoint_decrypt_key

dw 0002h
dd NULL


----------------------

data_dump.bin from cv.exe (v2.3.0.66)

dw 0001h
dd size_of_this_data

dw 03ebh
dd size
db 'corrupt file',0 ; file failed crc check..

dw 03edh
dd size
db 'fatal error',0  ; unknown error to me..

dw 1771h
dd size
db 'aspr license info',0 ; Jouri Kaplan..- Developer License -

dw 138bh
dd size
db ? dup (?)    ; rdata id byte info

dw 138ah
dd size
db ? dup (?)    ; asciiz decrypt key(s)

dw 1389h
dd size
db ? dup (?)    ; crypted mangled rdata

dd rva_of_thunk
db lib_id_byte
db 'libname',0

db asciiz_id, size_of_asciiz, 'crypted asciiz'
...
db asciiz_id, size_of_asciiz, 'crypted asciiz'

dd rva_of_thunk
db lib_id_byte
db 'libname',0

db asciiz_id, size_of_asciiz, 'crypted asciiz'
...
db asciiz_id, size_of_asciiz, 'crypted asciiz'

dd 0

dw 1b5ah
dd 4
dd file_crc ; also used to decrypt entrypoint (if its not NULL)

dw 1b59h
dd 4
dd crypted_entrypoint

dw 03e9h
dd 2
db ?,? ; decrypt info for call / jump (e8 / e9)

dw 0bbdh
dd 4
dd crc_size ; how many bytes to crc?

dw 03eah
dd 4
dd crypted_entrypoint_decrypt_key

dw 0002h
dd NULL