|
|
#2
01-11-2010, 22:32
|
|||
|
|||
|
Trace the VM compares. I doubt they changed it that much.
Break on checksummappedfile, then bp in the VM (CISC) cmp ecx,eax pushfd In RISC it'll be slightly different, can't remember something like cmp eax, ebx or so. The correct checksum will be the one that differs from the original. 
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| checksum question/help | chad1111 | General Discussion | 0 | 01-27-2004 16:56 |
| HEX and checksum | email2 | General Discussion | 3 | 01-05-2004 18:47 |
| CRC CheckSum Problem ( maybe ) | How2Crack | General Discussion | 6 | 06-30-2002 23:42 |
Threaded Mode