Results 1 to 6 of 6

Thread: what the hell with windows installer

  1. #1
    ya_humm
    Guest

    what the hell with windows installer

    Hi,msi passionate and guru.
    I didn't always reverse programme based on .inx or .msi.Nowaydays it seemed that windows installer had made some change.The setup.msi would create msi*.dll which contains the serial information,and immediately delete them after check it.And You can log the msi*.dll in filemon,but you can't get it and then disassemble with ida.
    So how did you deal with this pb?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    <script>alert(0)</script> disavowed's Avatar
    Join Date
    Apr 2002
    Posts
    1,281
    why not set a breakpoint on DeleteFile(...) and catch the file before it's deleted?

  3. #3
    use Total Commander with msi plugin to extract the DLL.
    :DWARNING: Shareware authors are reading your detailed discussions without paying you!:D

  4. #4
    Old trick used to be to break when the dll is created and HBOOT

  5. #5
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,157
    Blog Entries
    5
    Quote Originally Posted by JimmyClif
    Old trick used to be to break when the dll is created and HBOOT
    Damn sneaky crackers!

  6. #6
    ya_humm
    Guest
    Quote Originally Posted by JimmyClif
    Old trick used to be to break when the dll is created and HBOOT
    Can you explain it detailedly?Thanks in advance.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. CrypKey in a .dll from Vise installer.
    By FrankRizzo in forum Advanced Reversing and Programming
    Replies: 2
    Last Post: April 13th, 2006, 07:31
  2. A hell of a reverse engineering project
    By disavowed in forum Off Topic
    Replies: 10
    Last Post: April 11th, 2005, 10:07
  3. wise installer trouble
    By guitarman310 in forum The Newbie Forum
    Replies: 12
    Last Post: October 5th, 2004, 19:21
  4. windows xp debugger problems, rv's tracer on windows xp.
    By tsehp in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: April 6th, 2002, 12:11

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •