Quote:
|
If you're trying to find the OEP, just set a memory (on execution) breakpoint on the app's code section and run.
|
Yes, I see that finds the OEP okay, so do you then use the method explained by Labba to find the stolen bytes, seems harder than doing a trace if the darn thing will work.