As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [oep]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5 votes
2 answers

Why to dump precisely at OEP while manual unpacking?

What is the exact reason for dumping a process when the Program Counter is at OEP? I haven't found a decent answer. This Link says: In order to identify the IAT structure, Import Reconstructor ...
greenpiece's user avatar
1 vote
2 answers

how to find OEP when packer runs from original code section?

i think its pretty easy to find the OEP when the packer runs from a different section. there are many tricks, such as running a trace until you hit the codesection, or breaking on writes to the IAT, ...
albert's user avatar
  • 11
3 votes
1 answer

What are indicators for hitting the OEP?

for me, it is sometimes difficult to decide if I have hit the OEP when I try to manuelly unpack it. Especially in cases, when it does not begin with the standard function prologue. For example: I ...
user3097712's user avatar
  • 1,521