Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-03-2003, 07:05
mtw mtw is offline
Friend
 
Join Date: Feb 2003
Posts: 73
Rept. Given: 0
Rept. Rcvd 2 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
mtw Reputation: 2
Begginers in ASPR unpacking

This may help some of you that are having trouble with stolen bytes in ASPR and finding the OEP its a quick walkthrough so dont start a flame war its just for the begginers.
Attached Files
File Type: txt aspr stolen bytes.txt (6.5 KB, 410 views)
Reply With Quote
  #2  
Old 09-03-2003, 08:57
sinker
 
Posts: n/a
Thanks very much
Reply With Quote
  #3  
Old 09-04-2003, 01:25
ysco
 
Posts: n/a
Will check it out i always wanna learn

Thanks for the tut.

ysco.
Reply With Quote
  #4  
Old 09-04-2003, 23:49
bunion bunion is offline
Friend
 
Join Date: Apr 2002
Posts: 227
Rept. Given: 45
Rept. Rcvd 11 Times in 8 Posts
Thanks Given: 0
Thanks Rcvd at 6 Times in 6 Posts
bunion Reputation: 11
Thanks!!

paul333
Reply With Quote
  #5  
Old 02-01-2004, 04:41
mayday1814
 
Posts: n/a
Nice !!

I will try to understand and practise to do

thx!
Reply With Quote
  #6  
Old 02-01-2004, 12:05
Pompeyfan
 
Posts: n/a
Yeah, thanks from me too, any tuts for newcomers are appreciated.
Reply With Quote
  #7  
Old 02-01-2004, 17:07
ferrari
 
Posts: n/a
thanks alot for that tut.
Reply With Quote
  #8  
Old 02-07-2004, 05:48
lonewolf55
 
Posts: n/a
hey something I understand, that makes sense

now all I guess I have to do is figure out how to make the program not detect Olly


I have managed to un-pack my Victim but it won't run, I know it must be patched, and it dosen't seem to do much good to work with the un-packed code..


I know there is a way to hide olly but I still haven't figured it out yet..


Thanx for sharing ...
Reply With Quote
  #9  
Old 02-07-2004, 08:59
R@dier
 
Posts: n/a
Quote:
I know there is a way to hide olly but I still haven't figured it out yet..
Hi lonewolf55,

I usually use DeJunk plugin for the IsDebuggerPresent checks
altho i got this Hide Debugger v1.01 by Asterix the other the day

give it a go

best Wishes

R@dier
Attached Files
File Type: zip hidedebugger101.zip (2.2 KB, 75 views)

Last edited by R@dier; 02-07-2004 at 09:11.
Reply With Quote
  #10  
Old 02-08-2004, 08:05
lonewolf55
 
Posts: n/a
Quote:
Originally posted by R@dier
Hi lonewolf55,

I usually use DeJunk plugin for the IsDebuggerPresent checks
altho i got this Hide Debugger v1.01 by Asterix the other the day

give it a go

best Wishes

R@dier
Thanx so much for your post.....

I haven't DL'ed your attachment yet, I'm not at the computer where it needs to be right now....

I don't want to turn this into an Olly help Thread... but I guess I have to ask this....


What I meant by saying "I know there is a way to hide olly but I still haven't figured it out yet" is that when I look at all the settings in Olly as in options and such.. I'm just not sure how to add a plug-in to it..

I'm very familiar with Wdasm and some what familliar with IDA, but very new to Olly ... I do know Sice and I use Smartcheck quite often.. most of my experience is with VB reversing, Delphi reversing, and reversing Installer type scripts .. it's just recent that I am trying to learn about reversing Protectors.

Do you mind if I send you a PM...

Thanx again for your help
Reply With Quote
  #11  
Old 02-08-2004, 09:47
R@dier
 
Posts: n/a
Hi,

No Probs, always happy to help


R@dier
Reply With Quote
  #12  
Old 02-12-2004, 02:51
lonewolf55
 
Posts: n/a
Quote:
Originally posted by R@dier
Hi,

No Probs, always happy to help


R@dier
Thanx again for the plugin .. I figured it out just put the dll into the directory that Olly is installed in and when opened it's there, also it works just fine...

duh my bad.. trying to make things more difficult than need be...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Aspr anyone know this one? hobferret General Discussion 16 05-13-2015 22:54
ASPR unpacking in VCDCut Pro V4.15 codeX General Discussion 5 04-07-2005 14:58


All times are GMT +8. The time now is 12:25.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )