Log in

View Full Version : Found OEP. and then?


j_petrucci
May 14th, 2004, 04:17
Hi to all!
I'm pretty a newbie in the manual unpacking field, and I would like to know what (generally) to do after finding the program OEP. Just how to manage the basic steps (how to identify the packer rountine, skipping the CRC checks, etc...)

thanks

Ricardo Narvaja
May 14th, 2004, 05:41
well if you found the oep, i think you need know what packer is, generally you dump, rebuid the iat with IMP REC, and fix the dump, but this can be different in each packer.

Ricardo