Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #7  
Old 12-03-2004, 05:28
pluscontrol
 
Posts: n/a
I resolved some days ago a crackme wich had stolen bytes, and stopped once in the place that you points to write in code a jmp xxxx, the program never reach that address in program code but it stopped in xxxx.

Studying the code i understood it was stolen bytes place, the code is not clean but very hidden and you nedd a while to figure out what is going on.

With this target i tried to do the same but stops many times in that place to write in code, what i did was to put a breackpoint every place the jmp pointed and after last exception see wich one stopped.

It stopped twice which i say could be where stolen bytes start, the problem is if i use run trace until OEP i got about 4000 lines of code and is very hard to follow someting there.

you don't say how many times stops in that place when writing, as i said i use windows 98 and the program stops many times there, maybe in other os is different.
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ASprotect Problem p4r4d0x General Discussion 12 05-19-2018 16:17
problem.................................... nikicraki General Discussion 3 12-13-2003 21:03
IDA 4.17 problem loman General Discussion 2 08-21-2002 18:35


All times are GMT +8. The time now is 04:56.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )