![]() |
|
|
|
#1
|
|||
|
|||
|
Why not unpacking manually,...
missing code means not unpacked code section correctly. As Kerlingen noted you might also encounter wrong OEP address or might misplaced IAT with generic unpackers. |
|
#2
|
|||
|
|||
|
The target was too hard to unpack manually btw there is no doubt tat unpacking was succesful. Everything is working as expected other than this two functions. And as everything is working as expected there is no chance of wrong oep. It could be possible after dumping the section size may have not included required address....
Btw is there any way to know the address which get called when i click show toolbar if i found tat it wll be easy to include code in right section Last edited by yogi_saw; 08-07-2011 at 22:42. |
|
#3
|
|||
|
|||
|
Btw is there any way to know the address which get called when i click show toolbar if i found tat it wll be easy to include code in right section
|
|
#4
|
|||
|
|||
|
The default window/dialog proc is called. You just need to follow the control's ID from there.
|
|
#5
|
|||
|
|||
|
As i know the id gets pushed on stack for dialogbox. And same applies to menu but what do i need to see in case of submenu item
any hint on api or any docs to read is welcomed thanks all |
|
#6
|
|||
|
|||
|
It doesn't matter if the ID comes from a menu or a sub-menu, as long as it all belongs to the same window.
|
![]() |
| Tags |
| menu, procedure, resource |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| How to log all procedure calls? | morgot | General Discussion | 2 | 10-01-2024 03:30 |
| Olly & .NET | peleon | General Discussion | 8 | 06-21-2007 09:13 |
| Ollydebug plugin crashes.. how do i locate problem? | redbull | General Discussion | 3 | 11-24-2005 15:42 |
| Olly BPM | apex | General Discussion | 1 | 02-25-2005 15:02 |