saber
May 26th, 2007, 02:37
I used to unpack hasp envelop fairly easily until few weeks back. This is what i used to do
1. Break at OEP
2. Dump using Lord PE
3. Load Imprec, enter OEP address
4. Get Imports
5. Two imports will be unresolved one will be get proc addresss and other will be exitprocess
However it seems that the hasp envelop has been ungraded and as a result of which i am getting many unresolved import addresses.
Can someone please throw some light on unpacking new hasp envelop ??
Thank you
1. Break at OEP
2. Dump using Lord PE
3. Load Imprec, enter OEP address
4. Get Imports
5. Two imports will be unresolved one will be get proc addresss and other will be exitprocess
However it seems that the hasp envelop has been ungraded and as a result of which i am getting many unresolved import addresses.
Can someone please throw some light on unpacking new hasp envelop ??
Thank you