Messing with imports

[sharpe]

Hej there,

I am writing a manual protector for the sake of learning. I want to remove all the imports and write some code that lines everything up in my stub. When I try to do a simple:

OEP:
; 402018 = 1cb1d677 (little endian)
mov dword ptr ds:[402018], <address of my IAT code> ; exception here...
jmp <old ep>
...

I get an access violation. The address 402018 holds the address of a API function.

Can anyone explain this is so?

thanks in advance.

[moniker]

have you set the section attributes to writeable?

[sharpe]

Oh yes, a small detail
The section was 40000040, now C0000040. Works like a treat.

Thanks for the help Moniker.
Best,
S.