New answers tagged

0

I used Explorer Suite for patching IAT: https://ntcore.com/?page_id=388


1

Position dependent code If the executable was compiled as position dependent code, the addresses will not change - they will remain the same in process' virtual memory each time you run it. In this case, it simply suffices to find these addresses once during the runtime and they won't change. Position independent code In this (more likely) case, the ...


Top 50 recent answers are included