![]() |
|
#5
|
||||
|
||||
|
Hello:
If you disassemble the code of your a.exe, you could see imports (with wdasm32, for instance) and there all the apis used by the application. Then, select in the import window "ExitProcess" and display it, then you are getting a "call [<address of ExitProcess>]". You could write down in your new code a call like that you have got, or a jmp to the RVA of that call. Cheers Nacho_dj |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| APIs in Olly | jump | General Discussion | 3 | 09-25-2013 19:03 |
| help patching apis | Shub-Nigurrath | General Discussion | 7 | 01-26-2006 17:16 |