Posted By
icbrkr
on 2015-01-03
19:40:11
|  Re: Finding packed starting addresses
I've been following it in YAPE's monitor, but it's not always obvious unfortunately. That, and it's time consuming.
Maybe you have a point on the second piece - I can try packing a couple programs that I know the starting address to and see where the packer puts its JMP code.
|
