Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-22-2025, 20:34
Hadedx9 Hadedx9 is offline
Friend
 
Join Date: Mar 2025
Location: Syria
Posts: 15
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 12
Thanks Rcvd at 2 Times in 2 Posts
Hadedx9 Reputation: 0
Winlicense loader proplem

Hello,
I have protected a crackme with themida winlicense with
All protecting options then i have tried to make a loader to reverse a jnz in the code section but after making the loader it says no opcode found,also i used patching using the VA once and the RVA but it is still shows the same proplem.
Any one has done it before?
Reply With Quote
  #2  
Old 10-23-2025, 17:47
kernel kernel is offline
Friend
 
Join Date: Oct 2023
Posts: 67
Rept. Given: 0
Rept. Rcvd 23 Times in 18 Posts
Thanks Given: 22
Thanks Rcvd at 85 Times in 40 Posts
kernel Reputation: 23
If the target is a dll then the dll's base addresses are usually loaded on different offsets so you need to calculate the offset of the patch dynamically based on the base address of the target.
HMODULE hTarget = GetModuleHandle(TargetName);
uintptr_t patch_VA = (uintptr_t)hTarget + 0x1000 + patch_RVA;

or better use pattern search to directly find the patch VA:
uintptr_t patch_VA = (uintptr_t)find_pattern(TargetName, pattern);
Reply With Quote
The Following 2 Users Say Thank You to kernel For This Useful Post:
Hadedx9 (04-12-2026), niculaita (10-27-2025)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 13:59.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )