View Single Post
  #1  
Old 09-26-2004, 21:45
Eggi
 
Posts: n/a
Armadillo Import Elimination

Im trying to unpack an arma protected program (one process). It uses import elimination... so first i used a script (so that it does not detect the change) to patch the iat so that there are no invalid pointers left, but after the patch the first iat call goes to RegQuerryValueEx... so the functions are not in the correct place. How can i solve this? (I have only patched this jump and then i let the protected program run with the patched iat...)
Target:
Code:
http://activeurls.com/en/download.htm
Reply With Quote