View Single Post
  #4  
Old 09-30-2005, 10:46
suddenLy suddenLy is offline
Friend
 
Join Date: Jan 2005
Posts: 62
Rept. Given: 2
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 3
Thanks Rcvd at 9 Times in 8 Posts
suddenLy Reputation: 3
OEP is stored to [esp+10] after return of second time of gettickcount.

The OEP is usually stored with "ror oep, 7"

so u can get real oep with "rol [esp+10], 7"

of course the value, 7 is dependent on u.

when u try some other number, u maybe find oep easily.

if u have a problem, feel free to know me that.

regards
Reply With Quote