#31
|
|||
|
|||
little more debugging and i get to know that the pattern function in some way compares some bytes with another bytes generated from the same function, so right now i am patching the function to contain [ebp-1] = 0, what if i make [ebp-1]=0 with valid data not patching then i think i would not get the exception as the same data is later getting xored with the real oep section? is this correct?
|
#32
|
|||
|
|||
ok i give up, can anyone hand me the solution? so that i can actually see whats happening?
|
#33
|
|||
|
|||
Quote:
Can you give little more information about it? maybe some older notes you've wrote while analysis or anything |
#34
|
|||
|
|||
i didnt create any notes! although yea it crashes because of wrong decryption, you have to get the key!
|
Thread Tools | |
Display Modes | |
|
|