|
to staryic0n:
I just noticed that your oep isn't correct, and your
stolen bytes is missing one byte, here is the working
info:
oep=55 8B EC 83 C4 F0 53 B8 DC 4D 58 00
IAT is attached above.
addresses to patch:
are almost the same so start nopping
from: xor eax,eax to mov xxxxxx,edx
5789d9
5735eb ;check my post above
578a1a
578a5b
578a9c
57d8c3
57d904
the last is jnz :
578ae4 nop
----------------------------------------------------------
Thanks to Hotpepper , it is a nice program!
Last edited by britedream; 09-01-2003 at 01:24.
|