Unpacking and Inline Patching FSG v1.0

		Exetools > General > General Discussion
Unpacking and Inline Patching FSG v1.0

05-21-2004, 12:40

TQN

VIP

Join Date: Apr 2003

Location: Vietnam

Posts: 358

Rept. Given: 143

Rept. Rcvd 24 Times in 13 Posts

Thanks Given: 196

Thanks Rcvd at 168 Times in 51 Posts

Hi all !
I think I found the manual way to unpack FSG 1.0.
1. Bp GetProcAddress
2. Go until breakpoint occurred
3. F12 (run until return)
4. If the address of EIP is in the memory range of exe, scroll up 2-3 line. We will see a je OEP. If not, repeat the step 1 (continue run)
Attached file is a script file of OllyScript, will find address of the je and the OEP. It can have bug.
Regards

Attached Files

fsg_1.0.txt (706 Bytes, 19 views)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Inline Patching	MaRKuS-DJM	General Discussion	1	01-24-2004 23:03

All times are GMT +8. The time now is 07:23.