PDA

View Full Version : Neolite 2.0 Questions


Billy[23]
September 23rd, 2003, 01:58
Hi i recently download the b*so* tests Program for to check out the neolite from the Tutorials from:

Eternal Bliss and CoDe_InSiDe

i can follow them perfectly and find the oep and dump fine,

The program runs great, however i want to get rid of the neolite section and fully rebuild it, so i can get a perfect text listing, i do this by deleting the .neolit section and clicking on rebuild PE in lord pe (<-- i guess it aint the best way) when i reload it into the olly debugger i get it has a entry point outside the code section blah blah and it doesnt show much strings

Anybody has some clues for me ? iam not asking for the full info.

Thnx

- Billy

Ricardo Narvaja
September 23rd, 2003, 05:34
The mark in DEBUGGING OPTIONS-DEBUG-SEARCH FOR REFERENCES IN

MEMORY BLOCK CURRENTLY SELECTED IN DISSASSEMBLER

here go the mark

with this OLLY search for references in the block of memory you have in the CPU window, if not only show the code section and in the packed programs this has not the string of the program.

Change this mark and go to ths section GO TO EXPRESSION = 401000 for display the section of the program in the dissasembler and SEARCH FOR STRINGS now.

Ricardo

Billy[23]
September 23rd, 2003, 08:09
Ricardo: it was a pleasure to wake up and read this response, was just what i was looking for

Many thnx.