Thread: Import OS Fixing
View Single Post
  #14  
Old 05-01-2004, 01:25
britedream britedream is offline
Friend
  
Join Date: Jun 2002
Posts: 436
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
britedream Reputation: 0
Hi
400000+3c---> offset to pe signature, add to whatever there 80H, then there is an RVA to IMPORTDirectory.

regards.
Last edited by britedream; 05-01-2004 at 09:22.
Reply With Quote