View Single Post
  #2  
Old 04-17-2006, 00:32
D-Jester's Avatar
D-Jester D-Jester is offline
VIP
 
Join Date: Nov 2003
Location: Ohio, USA
Posts: 269
Rept. Given: 39
Rept. Rcvd 61 Times in 41 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
D-Jester Reputation: 61
Your EP looks like this:

Code:
005D94C4   E8 6FAE0000      CALL getright.005E4338; This is the OEP!  Found By: fly
005D94C9  ^E9 16FEFFFF      JMP getright.005D92E4
Very close to OEP,...

Code:
005D94C4   E8 6FAE0000      CALL getright.005E4338 <-Your OEP
005D94C9  ^E9 16FEFFFF      JMP getright.005D92E4 <-Jump To OEP
Microsoft Visual C++ v7.1 EXE *

Code:
005D92E4   6A 60            PUSH 60
005D92E6   68 48196B00      PUSH getright.006B1948
005D92EB   E8 0C9CFFFF      CALL getright.005D2EFC
005D92F0   8365 FC 00       AND DWORD PTR SS:[EBP-4],0
005D92F4   8D45 90          LEA EAX,DWORD PTR SS:[EBP-70]
005D92F7   50               PUSH EAX
005D92F8   FF15 C4284901    CALL DWORD PTR DS:[14928C4]
Although nothing changes, I am still getting the same results as you.

I haven't had time to do a full trace and investigate, but I did trace it in as far as 005D8943 which is a call that the program never returns from (terminates)...might be a good starting point.

I'll look into it some more if I get time this evening, but its easter and we need to talk my daughter out and let you hunt for eggs, etc...
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light.
Reply With Quote