Quote:
|
Originally Posted by evaluator
Markus, that unpacked PEC on ftp are your?
|
unpacked PEC is not mine... i didn't upload anything to ftp. and the PEC i released is inline-patched
Quote:
|
Originally Posted by britedream
Hi
400000+3c---> offset to pe signature, add to whatever there 80H, then there is an RVA to IMPORTDirectory.
regards.
|
britedream, what can i do there? i think LordPE point me to the same... but can i fix there something?