Help for unknown protector

		Exetools > General > General Discussion
Help for unknown protector

Thread Tools

Display Modes

12-27-2010, 18:15

Newbie_Cracker Newbie_Cracker is offline

VIP

Join Date: Jan 2005

Posts: 227

Rept. Given: 72

Rept. Rcvd 26 Times in 12 Posts

Thanks Given: 50

Thanks Rcvd at 25 Times in 18 Posts

I found the decompression routine, but still don't know why OlluDbg cannot break on write to memory!!!

Protector stub calls VirtualProtectEx after 6th exception (copies first 6 bytes, executes them and jumps in middle of API) to change the access to code setion. Is this the cause of bypassing memory breakpoint (as it's page gaurd)?

It seems that protector clears hardware breakpoints too.

__________________
In memory of UnREal RCE...

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Best software protector: Themida or Enigma Protector?	smartins	General Discussion	13	04-27-2010 17:58
New or Unknown Protector	lordnasty	General Discussion	0	06-19-2006 16:57
How to defeat Password Reminder 1.6 ? (An unknown protector)	Newbie_Cracker	General Discussion	17	02-17-2005 04:49

All times are GMT +8. The time now is 06:20.