Assembler Help

Well,
notice that when in edit mode, hiew doesn't show virtual addresses, but offsets; so write corresponding offset and you are done.
But one question comes to my mind, why are you trying repack trojan and hide it from AVP??? So why instead of damaging people won't you try to do some cracking? Is it too hard when compared to simple applying someone elses ideas on someone elses trojan?

heh, I'm not trying to destroy anything dude, it's just the first thing i got my hands on. =/

Anyways, one more question:
after this command,
.00425162: E2E3 loop .000425147 -----^ (3)

I got error, "jump out of bounds".....??

Are you sure you typed in right offset (of instruction push 000424FD0)?
The error means that you are try to jump too far...

yup, I triple checked it, but no luck.


help

So go from the other end, type in the hex values (E2 E3) and see what comes from it - then compare with what you typed in before.

Cool, that worked, much thanks Least

I was thinking, Is it possible to not use the direct addresses? ex, if want to have 0x00430F00 so i push 0x00430000 and add F00 later. I hope you understand. Is it possible?

Of course yes, you can push une value, add to it something, then ret and you are there; or you can do something like jmp eax, where eax can be calculated any way you can think of. And much more - get processor manuals and use you imagination (or google