|
|
#2
06-07-2005, 15:17
|
|||
|
|||
|
if the statement which you brought here is the correct one, then I think here are your stolen bytes:
55 PUSH EBP 8BEC MOV EBP,ESP 83C4 F4 ADD ESP,-0C B8??????? MOV EAX, ???????? The value of ???????? you can get when you are on the fake OEP (005FD99F), just look at your EAX register. 
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| FTP Problem | coolrpg | General Discussion | 3 | 03-17-2004 09:35 |
| problem.................................... | nikicraki | General Discussion | 3 | 12-13-2003 21:03 |
| IDA 4.17 problem | loman | General Discussion | 2 | 08-21-2002 18:35 |
Threaded Mode