Hi Foxthree

To my surprise, the oepfinder failed to find the oep of a software

called blendingclock, it is packed by asprotect 1.2, according

pescan. I believe the signature byte is at 167:01187b3c,

homepage is at xxx.blendingclock.nard.ru.

regards!

Hi BriteDream:

Thanks for the report. I'll take a look.

Signed,
-- FoxThree

Hi
I found the 61FFE0 signature at 01187BA8 (winhex method).

ciao

Hi BriteDream:

Why does the URL not work for me? A google search reveals nothing! Perhaps a mirror or mail me the target at foxthree@asm.net.

Thanks.

Signed,
-- FoxThree

Hi Foxthree !
try h**p://blendclock.narod.ru/Index.html

some mistake in previous url
ciao

Thanks NopRetf... but interestingly, how did you managet to locate the original URL? Google search revealed nothing on "blendingclock"

Signed,
-- FoxThree

Yes it’s true nothing with Google
Me too tried it
But..I know the narod.ru domain, then I searched there for “blending clock”

regards!

Sorry Faxthree for the incorrect url, it was a mistake on my part,

this is what happen when you get old. the url posted by Nopretf

is the correct one, if you ever have a need for the file , I will be

more than happy to E-mail it to you. Thanks

my regards !

Yo BriteDream!

No Problem Downloaded and Analyzed the proggie. Yep, bug in OEPFinder. Alas, certain assumptions that I'd made for the structure of an ASPR exe does not seem to hold good for this proggie.... which means I'll have to undo that assumption and do it the right way.... but wth, i'll fix it.

Thanks again for the proggie...

Signed,
-- FoxThree

PS: The OEP is at 00*82318

It was a silly bug really. Damn! Anyways, thx to BriteDream for the target and NopRetf for the correct URL! Look out for my upcoming announcement in the ToT section

Signed,
-- FoxThree

Chamelon clock had problems too ,strange

Will check with newer OEPFinder