How to trace PECompact2 packed exe?

It is very simple...

I've unpacked it with Olly.
1. Run prog with F9. Break on SEH (access violation)
2. View->Memory. Break on .code section. Run with Shift+F9. Breaking on 7XXXXX (usually).
3. Run till return (Ctrl+F12). Exit from function.
4. set break on jmp eax (it is nearby)
5. We are on OEP.

[SofTROOP]

Originally Posted by mc707

2. View->Memory. Break on .code section. Run with Shift+F9. Breaking on 7XXXXX (usually).

I'm sorry I cant follow you, did you mean set a BP on .code section? I tried that but no luck (break on 101xxx, not on 7xxxxx). Could you please give some more detailed instructions?

Thank you.

[MaRKuS-DJM]

i wrote tutorial for beta, and now i edited for final.

[TQN]

Wow, MaRKuS-DJM. You are rock.
Thank for your tutor and crack file of PECompact 2.0

[SofTROOP]

Really appreciate

nice tutorial

where is crack file of PECompact 2.0???

thanks.

hi fulone,

Cracked exe in zip file doesn't run by itself, you need other Components.
If you haven't downloaded the trial version of PECompact v2 yet, first you should donwload and install it, next overwirte or replace the pec2gui.exe by the file in zip.

hxxp://www.collakesoftware.com/files/pec2setup.zip

P.S.
PECompact v2.01 has already been released.

ckaso