blendingclock fails oepfinder

[britedream]

Hi Foxthree

To my surprise, the oepfinder failed to find the oep of a software

called blendingclock, it is packed by asprotect 1.2, according

pescan. I believe the signature byte is at 167:01187b3c,

homepage is at xxx.blendingclock.nard.ru.

regards!

[foxthree]

Hi BriteDream:

Thanks for the report. I'll take a look.

Signed,
-- FoxThree

[NopREtf]

Hi
I found the 61FFE0 signature at 01187BA8 (winhex method).

ciao

[foxthree]

Hi BriteDream:

Why does the URL not work for me? A google search reveals nothing! Perhaps a mirror or mail me the target at foxthree@asm.net.

Thanks.

Signed,
-- FoxThree

[NopREtf]

Hi Foxthree !
try h**p://blendclock.narod.ru/Index.html

some mistake in previous url
ciao

[foxthree]

Thanks NopRetf... but interestingly, how did you managet to locate the original URL? Google search revealed nothing on "blendingclock"

Signed,
-- FoxThree

[NopREtf]

Yes it’s true nothing with Google
Me too tried it
But..I know the narod.ru domain, then I searched there for “blending clock”

regards!

[britedream]

Sorry Faxthree for the incorrect url, it was a mistake on my part,

this is what happen when you get old. the url posted by Nopretf

is the correct one, if you ever have a need for the file , I will be

more than happy to E-mail it to you. Thanks

my regards !

[foxthree]

Yo BriteDream!

No Problem Downloaded and Analyzed the proggie. Yep, bug in OEPFinder. Alas, certain assumptions that I'd made for the structure of an ASPR exe does not seem to hold good for this proggie.... which means I'll have to undo that assumption and do it the right way.... but wth, i'll fix it.

Thanks again for the proggie...

Signed,
-- FoxThree

PS: The OEP is at 00*82318

[foxthree]

It was a silly bug really. Damn! Anyways, thx to BriteDream for the target and NopRetf for the correct URL! Look out for my upcoming announcement in the ToT section

Signed,
-- FoxThree

[Lbolt99]

Chamelon clock had problems too ,strange

Will check with newer OEPFinder