Skip to main content
Tweeted twitter.com/#!/StackReverseEng/status/334654781429805057
edited tags
Link
Source Link
Ange
  • 6.7k
  • 3
  • 29
  • 62

How can you reliably unpack a Windows driver manually?

When you unpack manually a Windows user-mode executable, you can easily break at its EntryPoint (or TLS), then trace until you reach the original EntryPoint. However that's not possible with a packed driver.

How can you reliably unpack a Windows driver manually?