![]() |
|
|
|
#1
|
|||
|
|||
|
stolen bytes
here are the stolen bytes
PUSH EBP MOV EBP,ESP PUSH -1 PUSH 421D08 PUSH 41B640 MOV EAX,DWORD PTR FS:[0] PUSH EAX MOV DWORD PTR FS:[0],ESP SUB ESP,68 PUSH EBX PUSH ESI PUSH EDI MOV DWORD PTR SS:[EBP-18],ESP XOR EBX,EBX MOV DWORD PTR SS:[EBP-4],EBX PUSH 2 just do a trace from the last exception when eip is in the code section. If you look in your trace log you'll see the above stolen bytes Regards lownoise |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| int3 and stolen bytes ! | Newbie_Cracker | General Discussion | 4 | 03-14-2007 16:48 |
| Damaged stolen bytes | *RemedY* | General Discussion | 9 | 05-22-2004 16:58 |
| 22 stolen bytes? | SvensK | General Discussion | 2 | 11-06-2003 17:13 |
| ASPR: stolen bytes neccessary?! | MaRKuS-DJM | General Discussion | 2 | 11-05-2003 09:13 |