Skip to main content
Reverse Engineering
ismael_akez's user avatar
ismael_akez's user avatar
ismael_akez's user avatar
ismael_akez
  • Member for 6 years, 10 months
  • Last seen more than a month ago
Profile Activity

49 Actions

All Accepts Posts Badges Comments Revisions Reviews Suggestions
awarded
 Yearling
answered
Unable to decompile C Code
comment
how to get address of PE section to jump in while backdooring PE binary
I use ollydbg in this example, so I dont have to compute generate an opcode, Olly will do it for you.
answered
how to get address of PE section to jump in while backdooring PE binary
awarded
 Critic
answered
Remote debugger for Linux from one VM (IDA) to another (running the debuggee)
comment
XOR encryption - How to find the key?
The first 4 bytes might be an address of kernel32.dll ==>0x4F, 0x12, 0x85, 0x7C. 0x7c85124f in windows xp.
awarded
 Commentator
comment
How to wrap dump process and execute it in another PC
I think you should consider the GetThreadContext, get the important values or registers, use SetThreadContext to set the values then ResumeThread by assigning the address to EIP.. Copying the stack might not work.
comment
How to wrap dump process and execute it in another PC
You mean that let say once the process pause in the breakpoint, you will copy the register values and then use these to another process?
comment
Strange Message after manipulating an exe file
Why do you need to change an specific byte (JE) without knowing what could happen in both ways? The application might have a CRC Checking to determine if it is modified.
comment
What is the difference between kernelBase.dll and Kernel32.dll
@Lolo9876 I created a small program that use the OpenProcess. imgur.com/a/6Gw2zbQ
comment
What is the difference between kernelBase.dll and Kernel32.dll
Im sorry for not adding the further explanation in the screenshot, I just want to show you that the OpenProcess in kernel32.dll is actually points to the OpenProcess of kernelbase.dll that calls the NtOpenProcess.
comment
What is the difference between kernelBase.dll and Kernel32.dll
I provided a screenshot for the kernel32 and kernelbase. Starting from Windows 7.
revised
What is the difference between kernelBase.dll and Kernel32.dll
added 394 characters in body
answered
What is the difference between kernelBase.dll and Kernel32.dll
answered
What is happening with these exceptions in OllyDbg?
awarded
 Editor
revised
How to load firmware x86 BIOS into IDA Pro 7.0
edited body
answered
How to load firmware x86 BIOS into IDA Pro 7.0