![]() |
|
#28
|
|||
|
|||
|
you may want to check you have dumped in the correct place,
or that your IAT is correct. another quick thing is have you reset the oep point to 00437578 the stolen bytes are 00437578 > $ 55 PUSH EBP ; real OEP 00437579 . 8BEC MOV EBP,ESP 0043757B . 83C4 F4 ADD ESP,-0C 0043757E . 53 PUSH EBX 0043757F . B8 78744300 MOV EAX,dumped_.00437478 if your IAT is correct and you have dumped in the right place all should be working Best Wishes R@dier |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| little question about manually unpacking | MaRKuS-DJM | General Discussion | 3 | 11-13-2003 00:43 |