|
Well done Markus,your iat is correct, and your stolen bytes are correct if not for the extra command you put: mov eax,xxxxxx, now your oep should shift little bit down,
After eliminating the extra command, to 555dec.
Regards.
Last edited by britedream; 12-30-2003 at 15:39.
|