View Single Post
  #8  
Old 01-12-2005, 07:21
hinte
 
Posts: n/a
You may use ImportReconstructor to rebuild import table, but some packers
like asprotect take some api's like GetCurrentThread - and move those value to
theirs memory - that inport reconstructor can't find any api on current offset, other api is GetCommandLineA - those apis you must rebuild manually - put only the corrent offet in imprect
Reply With Quote