flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
bitshifter 10 Jan 2010, 04:28
You really want to do this?
Code: mov esi,[eax+3ch] add esi,[ImageBase] mov [pNt],esi pNT = (ImageBase + 3ch) * 2 Just a guess... |
|||
![]() |
|
baldr 12 Jan 2010, 16:38
yinke,
You've hardcoded new section's VirtualAddress as 27000h, probably that address is already occupied. Windows performs several sanity checks when loading image, probably new section's PointerToRawData is invalid (after EOF). bitshifter, That's OK: he adds e_lfanew from MZ header to image's mapped view address to get pointer to PE signature/headers (check your pseudocode ![]() |
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2025, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.