![]() |
|
#10
|
|||
|
|||
|
I have not seen any nanomites in the target. You fix nanomites last.
Here is where the problem happens. Try this: 1. Load target in Olly 2. In Commandbar type BP MessageBoxA 3. Press F9 so it runs 4. Go to the target and press Exit 5. It will break in Olly at 77D8050B > 8BFF MOV EDI,EDI 6. Press CTRL-F9 7. You will hear a beep. Go back to Target and press OK 8. Olly will pause at 77D80551 C2 1000 RETN 10 9. Press F8 and Olly returns here 00402E0A 83F8 01 CMP EAX,1 10. Scroll down 8 lines and place a breakpoint at 00402E1D C2 1000 RETN 10 11. Press F9 8 times and it should break at 00402E1D. This is where it will crash because the return will take it to invalid 00000000 address. This makes be believe, there is a problem with stack. If I manually Popped the 8 zeros of the Stack, it exit without errors. Quote:
|
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Dumping Armadillo 3.0-3.6 without CopyMem II | chaboyd | General Discussion | 17 | 11-21-2004 06:20 |