View Single Post
  #1  
Old 02-23-2004, 03:36
bgrimm bgrimm is offline
Friend
 
Join Date: Jan 2004
Location: South of The North Pole
Posts: 66
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
bgrimm Reputation: 0
Unpacking, Olly Code display

'lo all,

I've run into a bit of trouble on working thru the
ASPack Unpackme from this thread:
hxxp://www.exetools.com/forum/showthread.php?s=&threadid=2728&highlight=aspack+2.12

Trouble is all the steps described work fine, but
when I get back to the OEP in the unpacked
program Olly doesn't display the updated code.

ex: Instead of

55 Push EBP
8B EC Mov EBP, ESP
etc..etc..

I See:

55 db 55
8B db 8B
EC db EC
etc...

Is there an option/setting in Olly (1.09d) that
refreshes/rebuilds that on the fly that I missed?
The code works but just doesn't display correctly in
the CPU window.

(If I right click and choose Analyze->Analyze Code
The display updates correctly but I figure it must
be able to do it automatically).

TIA,
-bg

Thanks to R@dier for an excellent beginners tute.
Reply With Quote