Hello! I encountered a problem, although I know this question in your mind of the Medium are stupid.The same process has two addresses, one can modify the value, the other not. Before the use of CE can be modified VALUE. Figure 2 addresses in the original value is 21017, I think they changed to 15939. By modifying the settings, could solve the problem?
[img]http://img509.imageshack.us/my.php?image=44568238.jpg[/img]
[img]http://img17.imageshack.us/my.php?image=28603765.jpg[/img]
0x08CC093C such as map be able to modify this address value, 0x005BEA63 not be able to modify this address value.
005BEA4D | E8 4ECEFFFF | CALL 005BB8A0 |
005BEA52 | 8B4D F4 | MOV ECX, DWORD PTR [EBP-C] |
005BEA55 | 64:890D 00000000 | MOV DWORD PTR FS:[0], ECX |
005BEA5C | 5E | POP ESI |
005BEA5D | 8BE5 | MOV ESP, EBP |
005BEA5F | 5D | POP EBP |
005BEA60 | C3 | RETN |
005BEA61 | 81FE 19520000 | CMP ESI, 5219 |
005BEA67 | 0F8F E5110000 | JG 005BFC52 |
005BEA6D | 0F84 A1110000 | JE 005BFC14 |