|
What's this?
playing with Resource Builder 2.1 (2.1.0.3)
Dump at fake OEP which is the common calls to Getmodulehandle
that Delphi app. uses
original OEP : 00613654
Stolen bytes: 558BEC83C4F8B89C2D6100
set new OEP to 00213654 with your favorite PE Editor then fill the 000000 with stolen bytes ...
now i can't find any entries to resolve IAT using latest Imprec ..
the plugins don't work neither
is this A new ASpr. tricks??
i think this is Aspr. 1.3 which uses some IAT protection
Any ideas/tips ??
Regards
|