Quote:
Originally posted by fakir
honestly, i didnt tried this but seems not a good practice. Since, esp is already changing while windows running. Not only your app. Try exact address of esp-4. Please give more detail about your idea to use such breakpoint.
|
Ok. I setting in SI "bpint 3".
I'm using Pe Tools by NEOx option Break & Enter with Softice
(open calc.exe(upxed)...) then PE Tools says: set "e eip 60" in softice so I do and after that breakpoint reached and I'm setting "bpm esp-4" and press F5 and PC Reboots
Any Ideas How to Exchange "bpm esp-4" to something else?