XeNTaX • Evocron Legends EXE archive

Page 1 of 1

Evocron Legends EXE archive

Posted: Sat Mar 13, 2010 5:28 pm

by AlphaTwentyThree

The contents of this post was deleted because of possible forum rules violation.

Re: Evocron Legends EXE archive

Posted: Sat Mar 13, 2010 8:43 pm

by aluigi

this is the fast way, the long good way would be to analyze the PE header and going after the last section... too long.

Code: Select all

findloc OFFSET string "C:\\dbTemp"
math OFFSET -= 4
for
    goto OFFSET
    get NAMESZ long
    if NAMESZ <= 0
        cleanexit
    endif
    getdstring NAME NAMESZ
    get SIZE long
    savepos OFFSET
    log NAME OFFSET SIZE
    math OFFSET += SIZE
next

Re: Evocron Legends EXE archive

Posted: Wed Mar 17, 2010 3:52 am

by AlphaTwentyThree

Thanks Luigi! I'm amazed as always...