|
Tried unpacking DVDIdle Pro - AsProtect
I'm pretty new to cracking on Intel machines...
I went thru Tag & Rename tutorial and everything worked perfectly.
However, I tried to apply the same concept with DVDIdle Pro.
Running Ollydbg, I loaded in DVDIdle Pro 3.38 and answered NO to analyzing.
Hit F9 and received an exception.
Pressed SHITF+F9 - 26 times until I reached the following:
see pic: dvdi_olly2.jpg
I set a bp at the RETN
Pressed SHIFT+F9 one more time.
Pressed ALT+M and right clicked DVDIdle code -> Break on memory access.
Hit CTRL+F11 to run a trace
I ended up here (see pic): dvdi_olly1.jpg
From here nothing looked the same...nothing was on the stack.
I tried VIEW->TRACE, HIGHLIGHT EPB (show ESP enabled with log command on)
This is what I saw (missing bytes?) see pic: dvdi_olly.jpg
If these are the missing bytes...where do I put them? There are quite a bit of "00" above the address shown in pic: dvdi_olly1.jpg
Any help would be appreciated...
-Malt
|