|
i dont know how to run secu 7.x in debugger, but theres a pretty easy way to find the oep: guard the .text section with PAGEGUARD. it will read/write it often during startup, but sooner or later it jumps (via ret) to this section. this is the oep then
keep in mind that every read/write will remove the pageguard bit from that page, so you have to re-enable it
|