|
sorry, forgot about this thread..
so i dld-ed Formik. That was Delphi-app, so at OEP are ripped just few
Delphi-standart instructions..
also there are 2 SVKP_Imported calls; (1st= mov eax,1; ret4; 2nd = ret)
some decryptor calls, from where last 2 decrypted code conteins PE-header check.
|