to find OEP used
2- memory breakpiont on code section,
to find stolen bytes used kinda LaBBa's method
I still have not got the hang of
Quote:
|
1- stack hard breakpoint on the first push, takes you to pushad, do the same for the pushad takes you to the stolen
|
yet,
but looking into it :-)
R@dier