How to trace PECompact2 packed exe?

		Exetools > General > General Discussion
How to trace PECompact2 packed exe?

04-26-2004, 21:39

mc707

Posts: n/a

It is very simple...

I've unpacked it with Olly.
1. Run prog with F9. Break on SEH (access violation)
2. View->Memory. Break on .code section. Run with Shift+F9. Breaking on 7XXXXX (usually).
3. Run till return (Ctrl+F12). Exit from function.
4. set break on jmp eax (it is nearby)
5. We are on OEP.

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
x64DBG trace logging	Stingered	General Discussion	1	12-22-2022 16:00

All times are GMT +8. The time now is 17:04.