to be sure what the OEP really is)įirst, take a look at the following thread: ActiveM***, inĬould you tell us which is the program you are dealing with? So I have no way (at least that I can see) to use SoftIce on this target (e.g. If I run with SoftIce loaded and protection on, program loads and silently terminates. If I run with SoftIce loaded and protection off, I get "anti-debugger" message. If I run with SoftIce not loaded at all, target works and displays "enter key" screen. I also managed to get IceExt running at last. Hopefully someone can tell me how to get this target running :) I also tried an OEP of 0129064F (which is what PeID said the OEP is) but that didnt make it run either. Hxxp:///adsloptd/rct3d_.rar is my current dumpĬan anyone tell me what I am doing wrong or how to get this target to actually run? Hxxp:///adsloptd/target.zip is the origonal packed target Then do "fix dump" on the dumped exe file. It finds valid IAT entries plus bad thunks.ĭelete bad thunks (IDA says no parts of the code call these "bad thunks" so they must not be valid parts of the IAT). Punch in B5D024 (our possible OEP) and press "IAT autosearch". Check noted OEPs.įound what looks like correct OEP at B5D024 Target is protected with Trymedia Activemark ġ.Start the target and go to the "enter the code" page.ĥ.Disassemble dumped target in IDA.
0 Comments
Leave a Reply. |