28 replies to this topic

[AceInfinity]

It's correct, It was a nice challenge though. Took me some time to do all the research, but I enjoy learning something new

[Holmes.Sherlock]

This challenge does not have a write-up yet. Ace, if possible, please spend some time today or the other with the steps to solve the challenge.

[AceInfinity]

I didn't want to post them earlier because in case anyone else would want to learn it. Here's what I found out though:

Spoiler

Looked at the DOS header and noticed there was dual PE headers in the 4 sections or chunks of data (one at the location that the e_lfanew currently points to, and another after it). e_lfanew points to the first PE header at offset 0x80, when it needs to be redirected to 0x480 for the second bit of text to display from the printf() command in the console at runtime. After that's all said and done you get the returned hex value parsed from the variable defined by %x



~Cheers

haha it really was a bit tricky

[Icecube]

@ AceInfinity
I am glad someone else than joakim, figured it out too.