Results 1 to 3 of 3

Thread: How do I calculate target in vbox?

  1. #1
    dec
    Guest

    How do I calculate target in vbox?

    Hi there all great reversers!

    I wounder if anyone can help my, you see I have a
    problem. How do I calculate the end of a program
    that is Vboxed?

    You see, I like to dump a Vbox app from its OEP and to its end station. When using procdump this is made the dumper, but if I know how to make the calculation I do not have to depend on procdump to save my day.

    Hope anyone has the time to replie!
    -Ms dec
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    tsehp
    Guest
    normally you should use softice with icedump, those are much better
    to do some clean job, and even use my tool, revirgin, to rebuild the dumped target's iats.

    to calculate the length, just do a map32 command into softice, then you'll see all the sections of it and be able to calculate the length,
    you should do a visit to the site's essays about unpacking.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    madmax
    Guest
    Funny this silly vbox came up, I just looked at an old vbox 4.3 target, and I was unable to get RV or IMPREC to rebuild good IAT...RV never resolved most of the entries, and IMPREC returned VirtualAlloc for most! heh...Its not a complicated redirection scheme, but I guess hard to get around in "general"...Actually, the hydra plugin included w/icedump still works sometimes, but what about future versions =( u guys have any luck w/vbox stuff?

    target was derive 5.04 from texas instruments btw

    madmax
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. How to calculate angular distance between sectors?
    By DEEP CRACK in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: April 2nd, 2014, 10:00
  2. C++ calculate size of method
    By b3n in forum The Newbie Forum
    Replies: 8
    Last Post: April 14th, 2007, 01:21
  3. vbox 4.6.2
    By arieri in forum Malware Analysis and Unpacking Forum
    Replies: 16
    Last Post: February 1st, 2004, 23:59
  4. How does Ollydbg calculate 32bit values of segment
    By 1bitshort in forum OllyDbg Support Forums
    Replies: 1
    Last Post: January 6th, 2004, 02:28
  5. How to calculate which jump I want to use...
    By Six Black Roses in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: March 12th, 2002, 19:28

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •