xsize 0 Report post Posted October 19, 2004 If u have any documentation on this question post me pleas Share this post Link to post Share on other sites
xsize 0 Report post Posted October 20, 2004 Unpack ASPack. >>>>>>>how fiend OEP begin the code of ASPack004A4000 60 PUSHAD004A4001 E8 00000000 CALL HC.004A4006----?push key F7 or F8 traceor in Olly after PUSHAD, dump the ESI register and set Hardware breakpoint on Dword push F9---->end the code ASPack code:004A4197 61 POPAD007063BF C3 RETN this RET code, show where our OEP.Make memory dump to disk... it's all... nearlyuse PEtools or imprec16 for restore programm import table Share this post Link to post Share on other sites
