|
|
#1
07-10-2005, 19:01
|
||||
|
||||
|
try to open this with olly
little trick, little I know...
 I've made a change to a crackme file. Regards. 
|
|
#2
07-10-2005, 19:23
|
||||
|
||||
|
NumOfRvaAndSizes > change to 10
|
|
#4
07-10-2005, 22:42
|
||||
|
||||
|
no but this trick is known for long time because used in some prots.
|
|
#5
07-10-2005, 23:21
|
|||
|
|||
|
This was introduced first by Nicolas Brulez in the "Honeynet Project, Scan of the Month 33". We can find the details in "Anti Reverse Engineering Uncovered", CBJ, Vol2-No1 2005.
|
|
#6
07-11-2005, 00:30
|
||||
|
||||
|
written about it is different from date when it was firstly used. i met this thing about a year ago in a protector. today it's also also used in slvcodeprotect to name just one example.
|
|
#7
07-14-2005, 07:58
|
|||
|
|||
|
patch od:
/*45C673*/ mov dword ptr [ebp-C],2 TO /*45C673*/ mov dword ptr [ebp-C],0 ??
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Awesome Open Source | user1 | Source Code | 0 | 04-20-2021 16:52 |
| Possible to open take command 10? | neogen | General Discussion | 0 | 08-06-2009 20:30 |
| File: *.htz ? (how to open it) | hosiminh | General Discussion | 2 | 12-21-2004 06:17 |
Linear Mode
