View Single Post
  #14  
Old 09-06-2004, 03:14
Kyrios Kyrios is offline
Friend
 
Join Date: Feb 2003
Posts: 48
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Kyrios Reputation: 0
Hi hobogoblin,

I set some custom exception. And after press Run(F9), i land here:
POP DWORD PTR DS:[EAX]
POP DWORD PTR FS:[0]
ADD ESP,4
POP EAX
XOR EDI,EDI
INC EDI
PUSHAD

Then i hit Shift+F9, land here:
POP DWORD PTR DS:[EAX]
POP DWORD PTR FS:[0]
ADD ESP,4
POP EAX
MOV ESI,EAX
AND ESI,FFFF0000
MOV EBX,0BF1
ADD EBX,EBP
CALL EBX
PUSHAD

The second hit i land here:
POP DWORD PTR DS:[EAX]
POP DWORD PTR FS:[0]
ADD ESP,4
POPAD
PUSH EAX
PUSH ECX
BSWAP EDX
NOT EDX
PUSHFD

Sorry if the second exception codes does not look similar with previous i typed. But this is the correct one. After this point, you may use the Bp command.
If your target still silently quit, Look likes you didn't hide olly very well. You should read this
Code:
http://www.woodmann.com/forum/showthread.php?t=6167
kyrios
Reply With Quote