|
you mean you would want to change
PeHeader.AddressOfEntryPoint to point to line 7
normallly compiled exe will have an image base of 0x400000 and AddressOfEntryPoint as 1000
so you mean you want to Edit this to point to 1006 (opcode lengths not considered using your own lines as referances so 6 here means line 6)
so line 1 will still have
push ebp (doesnt matter coz it wont be executed )
line 2 = mov ebp,esp
push -1
push 0
push 0
push ebp
jmp line 2
yes it should theoratically work as an infinte loop if you have an infinite stack space but normally stack space is limited to about one virtual page (4kb granualrity iirc or about 1000 dwords)
so after about 250 cycles it would crash with stack over flow exception
btw you can easily do this kind of experiments your self
get masm32 package and start cranking out some exes and debug them
using ollydbg
|