![]() |
|
#35
|
|||
|
|||
|
Quote:
OEP = 419CA4 stolen bytes = 55 B0 60 89 04 24 55 IAT RVA = 25000 IAT size = 2C8 The number of stolen bytes, ITA location, and ITA entries all seem very strange to me, so it is likely that this information is not 100% correct. It appears to work correctly, but I only tested the GUI, not the actual functionality. So, even if it's not totally correct, it's a good starting point. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Aspr anyone know this one? | hobferret | General Discussion | 16 | 05-13-2015 22:54 |