Log in

View Full Version : Wdasm


Raven58
January 2nd, 2001, 16:10
Using wdasm on a crackme and came up with the following error message,"this pe file not in standard windows format,all data references will be terminated". Being a newbie, not sure what this means other than no string references. Tried to unpack the file, but that didn't work. An explanation would be appreciated.
Thanks!

Kayaker
January 2nd, 2001, 19:41
Hi Raven58,

What does a file identifier such as FileInfo or GetTyp say it's packed/compiled with? What did you try to unpack it AS?? Got a link?

Regards,

Kayaker

Raven58
January 3rd, 2001, 10:07
Kayaker, this is a Lazarus crackme from the hellforge site that he describes "as the hardest he coded" It had anti sice and I thought some type of anti-debugger. I used proc dump and selected unknown, proceded and then came up with the message" terminated,not packed or trace failed". I also tried to rebuild the PE header with proc dump to no avail.Using Hiew, I noticed something about Virtual protect. I can break on hmemcpy and get into the crackme but had no luck finding or calculating the routine. To new at this I guess, but learning. The name of the crackme is crackmeg2.zip and I would be glad to e-mail it to you. Thanks for your response to this post.