flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
bitshifter
You really want to do this?
Code: mov esi,[eax+3ch] add esi,[ImageBase] mov [pNt],esi pNT = (ImageBase + 3ch) * 2 Just a guess... |
|||
![]() |
|
baldr
yinke,
You've hardcoded new section's VirtualAddress as 27000h, probably that address is already occupied. Windows performs several sanity checks when loading image, probably new section's PointerToRawData is invalid (after EOF). bitshifter, That's OK: he adds e_lfanew from MZ header to image's mapped view address to get pointer to PE signature/headers (check your pseudocode ![]() |
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2020, Tomasz Grysztar. Also on GitHub, YouTube, Twitter.
Website powered by rwasa.