Exetools - try to open this with olly

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - try to open this with olly (https://forum.exetools.com/showthread.php?t=7789)

taos	07-10-2005 19:01

try to open this with olly

1 Attachment(s)

little trick, little I know... :)

I've made a change to a crackme file.

Regards.

MaRKuS-DJM

07-10-2005 19:23

NumOfRvaAndSizes > change to 10

Jay	07-10-2005 21:09

Quote:

Originally Posted by MaRKuS-DJM

NumOfRvaAndSizes > change to 10

was it intended as a race to be first to post the solution?

MaRKuS-DJM

07-10-2005 22:42

no but this trick is known for long time because used in some prots.

TQN	07-10-2005 23:21

This was introduced first by Nicolas Brulez in the "Honeynet Project, Scan of the Month 33". We can find the details in "Anti Reverse Engineering Uncovered", CBJ, Vol2-No1 2005.

MaRKuS-DJM

07-11-2005 00:30

written about it is different from date when it was firstly used. i met this thing about a year ago in a protector. today it's also also used in slvcodeprotect to name just one example.

pLayAr

07-14-2005 07:58

patch od:
/*45C673*/ mov dword ptr [ebp-C],2
TO
/*45C673*/ mov dword ptr [ebp-C],0 ??

All times are GMT +8. The time now is 16:16.