First of all, sorry, if these kind of question had been post somewhere before but i didn't found any of its from the search.
I did decrypt the dekaron.exe file and studied the "nebular" research already. Now i could open it with Ollydbg and able to read the file normally in hex with out the encryption warning.
Anyway, my problem is, I'm not used to ASM, I could read it but not track the hold file with that long and very complicate but from the screen shot made by Nebular, there are Functions name with parameters and else represent nicly which i couldn't found it with Olldbg.
So, I was wondering anyone could show me the way to do that or which program i should to use ? So I could find the the place of those functions like in Nebular research.
ps Sorry for any mistake, but Englist is not my native languge and thanks in advance.
 |
