Quote:
Originally Posted by TippeX
must be very simple 
u can unpack it in olly, trace from the start, scroll down a little and you'll see 2 calls to do the imports then at the end an add esp, some value
then jmp realeip
dump from there, rebuild imports.. sorted
/me wonders why the new (nothing like the real one) fairlight packed it.. |
I never tried working with a debugger. I only used Olly vor Disasm if Win32dasm failed. But I think I'll go further in the next time to level up.
28-12-2006, 18:30
Threaded Mode