Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-30-2013, 21:06
Av0id Av0id is offline
VIP
 
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 15 Times in 15 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
in this case SO is renamed DLL, just put breaks on export calls or use generic approach with CreateFileExA/W

PS. i guess it's blowfish based and to decrypt it you must have a license file
Reply With Quote
  #2  
Old 10-30-2013, 22:56
bridgeic bridgeic is offline
Friend
 
Join Date: Jun 2012
Posts: 91
Rept. Given: 7
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 1
Thanks Rcvd at 7 Times in 6 Posts
bridgeic Reputation: 3
Quote:
Originally Posted by Av0id View Post
in this case SO is renamed DLL, just put breaks on export calls or use generic approach with CreateFileExA/W

PS. i guess it's blowfish based and to decrypt it you must have a license file
Yes, really need a license, I use evaluation license on test.

> just put breaks on export calls or use generic approach with CreateFileExA/W

Sorry, I still haven't understood it, I'll do some search/study first, thanks a lot.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
unlinker - a program for extracting functions from a PE file for later reuse jonwil Community Tools 5 11-25-2016 08:24
SOFTICE symblo loader won't break on program execution please help. logicalbit General Discussion 15 02-28-2003 02:33


All times are GMT +8. The time now is 04:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )