Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish
Last edited by nog_lorp on Thu Oct 09, 2008 2:29 am; edited 1 time in total
Joined: 06 Jan 2007 Posts: 768 Location: %HomePath%
Posted: Sat Oct 04, 2008 2:01 am Post subject:
It's not being used with the actual decryption\encryption routines.
On a side note: ~nog_lorp
Regarding APIs in use: don't forget to mention VirtualProtect =P
As for getting things done correctly with olly:
Don't set\remove software breakpoints after the first copy of the memory has been made
Don't break on the decryption routine, break on it's calls (or use hardware breakpoints as an alternative)
Make sure to keep those right or you'll trigger the integrity check(4E14, with olly ).
As for cracking: break on the decryption routine, use ECX and set the following:
[[ECX+10]] <- [ECX+4] xor [ECX+8] xor 5000
Can also be done with Cheat Engine(change the EIP[to change the data]\EAX[@ return]).
~Cheers!
Last edited by DoomsDay on Sat Oct 04, 2008 4:59 pm; edited 2 times in total
All times are GMT - 6 Hours Goto page Previous1, 2, 3
Page 3 of 3
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You cannot download files in this forum