Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #8  
Old 08-30-2004, 05:18
bunion bunion is offline
Friend
 
Join Date: Apr 2002
Posts: 227
Rept. Given: 45
Rept. Rcvd 11 Times in 8 Posts
Thanks Given: 0
Thanks Rcvd at 6 Times in 6 Posts
bunion Reputation: 11
Quote:
Originally Posted by MaRKuS-DJM
i think this armadillo should be no problem. if there's really no copymem, a BP CreateThread leads you near OEP. step two calls out and look down. there should be a call EDI which leads you into OEP
OK thanks Markus im now attempting this at the mo

..can u clarify what u mean "step 2 calls out" ?

Ive loaded my app into ollydegub..set it to break "entry point of main module" in options

..did "BP CreateThread" in commandline plugin then F9'd it landed me in kernel.32.dll..ok..does "step 2 calls out" mean 2 returns from there/here ?...

sorry for mix up

paul333
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Unpackable packer ? jackdanielz General Discussion 9 02-12-2003 05:55


All times are GMT +8. The time now is 09:24.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )