![]() |
|
#2
|
||||
|
||||
|
Heya RaptorX
Ok I'll break this down for ya. First: 60A8EC is the correct EP for that executable. Code:
00400128 ECA82000 DD 0020A8EC ; AddressOfEntryPoint = 20A8EC 00400134 00004000 DD 00400000 ; ImageBase = 400000 Code:
00340118 DF310600 DD 000631DF ; AddressOfEntryPoint = 631DF 00340124 0000417E DD 7E410000 ; ImageBase = E410000
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Finding which packer has been used | rcer | General Discussion | 16 | 11-03-2019 01:56 |
| Finding API Address | britedream | General Discussion | 5 | 10-05-2006 21:28 |