Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 08-31-2013, 04:43 PM
mindoverflow mindoverflow is offline
Member
 
Join Date: Aug 2009
Posts: 35
Default Hardlock IDA signature

Hi,

I have this dll https://www.dropbox.com/s/yoyuemrfmq56xkf/m1support.dll that calls the hardlock API. I'm applying this IDA signature file https://www.dropbox.com/s/094hbryrbx...Hardlock10.sig

In IDA it detects 72 functions and in OllyDbg 19 functions, but the function names are strange or should I say not those that I know from the HL API as shown in the picture.

Is this due to a faulty/corrupted sig file ? If so, then could someone point me to a good sig file.

Thanks.
Attached Images
File Type: jpg hardlock_sig.jpg (51.1 KB, 49 views)

Last edited by mindoverflow : 08-31-2013 at 04:47 PM.
Reply With Quote
  #2  
Old 08-31-2013, 05:21 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

They are deliberately obfuscated to make your life difficult . If you translate the comic book German, you will see they have daft food based names, like whitesausagesandwich, sausageandchips, etc.
Reply With Quote
  #3  
Old 08-31-2013, 05:49 PM
mindoverflow mindoverflow is offline
Member
 
Join Date: Aug 2009
Posts: 35
Default

Is there any magical solution you could think of ?
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.