Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-26-2003, 21:00
DCZ
 
Posts: n/a
Angry pe-compact

I have been having problem trying to unpack a Pe-compact 1.68 packed dll. Any ideas how to get around this.
Please help.
Reply With Quote
  #2  
Old 10-27-2003, 01:18
DCZ
 
Posts: n/a
Unhappy Inline patching doesn`t work

I have also tried inline patching .....yet it doesn`t work as i expected
Reply With Quote
  #3  
Old 10-27-2003, 02:12
Nightfly
 
Posts: n/a
Are you sure the patch is correct? First try to patch it in memory (sice, ollydbg) to see if it works correct.
Reply With Quote
  #4  
Old 10-27-2003, 02:43
DCZ
 
Posts: n/a
Lightbulb Inline patching

Patching in memory with ollydbg works, but when i try to inline patch it doesn`t work.Maybe my patch gets overwritten by unpacker code..i suppose. Is there any cool method to find blank space to inject code? I usually inject code at the end of any section.
Reply With Quote
  #5  
Old 10-27-2003, 02:54
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
Re: Inline patching

Quote:
Originally posted by DCZ
Patching in memory with ollydbg works, but when i try to inline patch it doesn`t work.Maybe my patch gets overwritten by unpacker code..i suppose. Is there any cool method to find blank space to inject code? I usually inject code at the end of any section.
i think it's the same as with aspack... the jump to the oep is written while unpacking... set a "memory on write" breakpoint in ollydbg on the oep-jump. then you will see the "bad code".

if you have no space for inline-patching, use this litte tool (attachment) zeroadd... it adds an empty section where you can write your inline-patch.
i hope this helps.

MaRKuS TH-DJM
Attached Files
File Type: zip zeroadd.zip (6.9 KB, 63 views)
Reply With Quote
  #6  
Old 10-27-2003, 12:41
R@dier
 
Posts: n/a
@MaRKuS-DJM

Thanks for the tool

R@dier
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Paragon Backup & Recovery 14 Compact CodeCracker General Discussion 0 07-12-2018 17:32


All times are GMT +8. The time now is 15:55.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )