![]() |
|
#15
|
|||
|
|||
|
I don't like the snippet. You didn't give a real explanation.
0x00A89010 -> This memory is dynamically allocated. This can change with every process start. Using this as hardcoded address doesn't seem smart. Why do you read and write 12 bytes? You need only 2 (5) bytes. It even looks like you don't need a 2nd ReadProcessMemory. If it is unpacked, it is unpacked. Why check it 2 times?
__________________
My blog: https://ntquery.wordpress.com |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| [HELP] How to write a simple Loader in ASM on MSDOS | stoney81 | General Discussion | 5 | 12-20-2024 15:55 |
| Simple Task [make loader for UPX target]... | diablo2oo2 | General Discussion | 1 | 12-30-2004 07:03 |