Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-24-2016, 18:37
suddenLy suddenLy is offline
Friend
 
Join Date: Jan 2005
Posts: 62
Rept. Given: 2
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 3
Thanks Rcvd at 9 Times in 8 Posts
suddenLy Reputation: 3
yep, the child process is javaw.exe.
When I try using command line, file integrity error pops.

Even if catching crack point through monitoring tool as you said, how can I find that byte code??

Anyway, thanks for your comments.
Reply With Quote
  #2  
Old 11-25-2016, 02:47
Mkz Mkz is offline
Friend
 
Join Date: Jan 2002
Posts: 98
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 5
Thanks Rcvd at 25 Times in 17 Posts
Mkz Reputation: 2
Quote:
Originally Posted by suddenLy View Post
yep, the child process is javaw.exe.
When I try using command line, file integrity error pops.

Even if catching crack point through monitoring tool as you said, how can I find that byte code??

Anyway, thanks for your comments.
Check the 2 attached images, also uploaded to:
- hxxp://i65.tinypic.com/2nu0fie.png
- hxxp://i67.tinypic.com/xfcgtd.png

I launched JVisualVM, which is part of the Java SDK, and also uses the same approach: there's an executable which loads some java code in a spawned process.

The 1st image shows you the command line which could - I guess - be executed directly to launch the java code. It indicates the classpath (which libs to load), the parameters, the start class name, etc.
When you mention "file integrity error", I'm not sure if it's related to checks done by the java program, or if you didn't supply exactly everything it needed - including the correct working dir or environemnt variables.

The 2nd image is for a thread dump I requested from JVisualVM to a running java program (which happens to be JVisualVM itself) and you can see one of the threads' call stack.
If you want to, say, understand what the "org.openide.util.RequestProcessor$task.run" method does, you'll need to use the regular java tools to decompile its class file and take a look at its "decompiled source" or even the java bytecode if decompilation is not possible.
You'll need to search all the jars in the classpath to understand which one provides that class, so you can decompile it.
Attached Images
File Type: png java_example_2.PNG (40.2 KB, 3 views)
File Type: png java_example.png (48.2 KB, 8 views)
Reply With Quote
  #3  
Old 11-29-2016, 13:08
suddenLy suddenLy is offline
Friend
 
Join Date: Jan 2005
Posts: 62
Rept. Given: 2
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 3
Thanks Rcvd at 9 Times in 8 Posts
suddenLy Reputation: 3
Is it possible to extract jar from exe?

There is no jar in the target directory, but dlls and exe are only existed.

For your interest, I found license check dll and I can use 'EBFE' method to catch target export function.

However, unfortunately, file CRC check error pops from target exe file.

Anyway many thanks.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 22:59.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )