Find OEP After Infection
Hey people of this world,
I've created a virus, now i'm trying to create the anti virus,
i want to calculate the Original Entry Point, i saw that in every exe, the EP always point to .text, my problem is : the OEP dont always point to the virtuel address of the .text, for example:
10A0h ..."Entry Point, points here"
how can i calculate that? i'm really stuck