hi all
i'm toying myself with premiere 6.0, but i've got some problems in unpacking:
i can't find the oep, iat rva and iat size (or, better, i'm sure it's possible, but actually i get lost somewhere in the code).
i tryed bpx-ing GetProcAddress and then p ret-ing back, but i land in a code full of jumps in the middle of other instructions, and there i can't find the way back home.
i also tryed bpx GetVersion, but i still get lost
some clues on a way to get oep?

10x

a code full of jump? thats your way back home.
you should encounter it just after your second 'bpm x' of the call edi.
just trace with f8 until you land to a clean code, the first byte of clean code will be your oep