|
|
|
|
#1
10-21-2005, 19:50
|
|||
|
|||
|
i agree with the last post's either set the int3 in the places you need them, you should have a rough idea where the flexlm functions are located, then just let it crash and debug from there, or like the last person said you can trace the createprocess call's, either emulate them if they are doing (OldProc->CreateNewProc->KillOldProc) (NewProc->FlexLM), or just attach as after they are supended.
Its possible for you to msg me the target name and url ? id be intrested to look 
|
|
#2
10-21-2005, 20:13
|
||||
|
||||
|
I'm persuing the INT3 approach which seem to be a good idea. Not quite ther yet though. Thanks for your help guys.
Git
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| It's not so difficult to produce two md5-collided exe files | BlackWhite | General Discussion | 20 | 01-11-2016 18:03 |
| cracking jcreator, is it difficult? | doby | General Discussion | 6 | 09-27-2004 16:15 |
Hybrid Mode
