Quote:
Originally Posted by evlncrn8
.ooa section is just origin, no denuvo implied and are you just assuming .net entrypoint cos of the ff 25 jmp to activation.dll (its not .net at all)
|
Thats because I haven't analyzed that many newer EA targets - however, my research still stands and is accurate except for that last variation which may or may not be in combination of Denuvo protected games. However, the 0xFF25 EP, is standard EP for almost all .NET compiled assemblies - thus, it -may- resemble the .NET PE EP...
As I also said earlier, I don't claim its actually .NET assembly at all