windows - Adjusting Executable Entry-point -


i attempting alter entry-point of portable executable (pe) execute code instead. here have done.

  1. enlarged .text section, i.e. virtualsize equal sizeofrawdata
  2. inserted shellcode @ file offset 1340 (rva 3140) cc int 3 (attaches debugger)
  3. set entry-point 3140

problem: executable not call code. instead, produces shim error.

hexdump containing code

dumpbin of executable headers


Comments

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

python Tkinter Capturing keyboard events save as one single string -

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -