Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #7  
Old 03-09-2004, 14:34
hobgoblin hobgoblin is offline
Friend
 
Join Date: Jan 2002
Posts: 124
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
hobgoblin Reputation: 0
Hmm

If you erase IceExt information from the register, and then make sure to make the program jump at the right places, your program should run without problem. To find the "important" checks, use bp CreateFileA after attaching the child process to a running copy of Olly. After several hits, Olly will end up checking to see if Softice is installed. When that happens, exit the CreatefileA routine, and trace down a little bit in the code. There you will find the OpenService check. After that check you will find a couple of jumps that need to be changed during runtime.

Good luck,
hobgoblin
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Armadillo 8.6 unpacking problem eAGLe_eYe General Discussion 8 03-11-2013 22:43
Armadillo 4.44 problem SystemeD General Discussion 2 11-06-2006 18:03
Armadillo 3.75b Problem TmC General Discussion 5 12-20-2005 10:55


All times are GMT +8. The time now is 05:19.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )