|
my pleasure!,
Some time it is usefull to use my script "asprsto", it will stop where we should be looking in the stack, that is 12ffc4:77e814c7(for this program), F9 few times till you are at mov ebp,esp; then follow the execution of your stolen with F8.
Last edited by britedream; 03-24-2004 at 22:38.
|