atom0s Moderator Reputation: 198
Joined: 25 Jan 2006 Posts: 8516 Location: 127.0.0.1
|
Posted: Fri Jul 21, 2017 9:01 pm Post subject: |
|
|
The address may be in a memory region with different flags. On CE's main window, under the scan type options, you will see check boxes for 'Writable', 'Executable', 'CopyOnWrite'. Click on Writable until it is a square rather than a check mark and see if you can find things that way.
Also, the value may not be stored as a 4-byte value so be cause to check other types as well.
_________________
- Retired. |
|