![]() |
|
#3
|
|||
|
|||
|
In the meanwhile i used iceext extension for sice.
It is not detected mostly even by Int1. I tried Ur suggestion. works well. One culd use a macro too: MACRO a= "r eip eip-1; eb eip %1" At the entry i have PUSHFD PUSHAD CALL abcd here reisters are saved. and these should be restored to just before OEP jump. so i looked for the register value loaction in data window and set break on text then bpx / bpm at address. but it doesnot stop there. Where am I going wrong
|
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Inline Patching | MaRKuS-DJM | General Discussion | 1 | 01-24-2004 23:03 |
| Inline patching for armadillo | annibal | General Discussion | 1 | 09-04-2003 14:24 |