Jump to OEP - Aspack 2.12

[TheDutchJewel]

Originally Posted by hobgoblin

Put a bp on 0066B3A0 and singlestep from there...

Are you sure about bp at 0066B3A0?

0066B3A0 B9 B2030000 MOV ECX,3B2

After pressing F8 there I get this error:

Breakpoint corrupted!
OllyDbg set byte at address 0066B3A0 to CC (code of command INT3, used as breakpoint). Now this byte contains
CB. Do you want to keep modified command? (If you answer 'No', old code B9 will be restored).

After I choose Yes or No, progress terminates.

BTW this happens also in the original EXE:

0066B3A0 B9 ECB21700 MOV ECX,17B2EC

[hobgoblin]

Never mind putting a bp at 0066B3A0.
Check the code there before and after the decryption routine is done. Then singlestep through that code without bp's just to see what happens with the code from 0066B3A0 until OEP is reached. Usually the adress for the OEP is written into the address 0066B3C0. In this case the adress to the location for the patching code is written into 0066B3C0.

hobgoblin