To find the address of a file entry point in Immunity Debugger.
note: images to follow :)
- Start the program
- Attach the program to Immunity Debugger
- Click on the letter
eto open up theExecutable moduleswindow - Locate the file you are running
- Under the entry tab will be the address
- Copy the address,
right clickandcopy to clipboardthen selectentry - Click on the letter
cto take you back to theCPUwindow - Click on the
forward arrow with the four dotsthis will open up theEnter expression to followwindow - Paste in the address, and click
OK