View Single Post
  #2  
Old 12-29-2003, 12:33
britedream britedream is offline
Friend
 
Join Date: Jun 2002
Posts: 436
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
britedream Reputation: 0
Hi Markus,
the stolen bytes and Iat are not correct, your program is working on the following info.:
005B6CCC > $ 55 PUSH EBP
005B6CCD . 8BEC MOV EBP,ESP
005B6CCF . 83EC 0C SUB ESP,0C
005B6CD2 . 53 PUSH EBX
005B6CD3 . B8 BC645B00 MOV EAX,dd_.005B64BC

here is the iat:
Attached Files
File Type: txt treec.txt (27.2 KB, 18 views)

Last edited by britedream; 12-29-2003 at 12:38.
Reply With Quote