Thread: Help Unpacking
View Single Post
  #7  
Old 02-24-2005, 04:37
leosmi05 leosmi05 is offline
Friend
 
Join Date: Feb 2005
Posts: 26
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
leosmi05 Reputation: 0
Red face

Well, one problem could be that is has a CRC. If the programmer also added some anti-SoftICE stuff, than probably he also added some CRC check.

And maybe he is CRC-checking only a part of the file (because it is now compressed and he should have written somewhere the CRC, but that's different when he recompiles).
Or maybe it's looking only for the lenght of the file.

Anyway, just put a BPM on the OEP and see if anything tries to access it.
And also check for the GetFileSize or CreateFileMapping.
Reply With Quote