![]() |
|
|||||||
|
|
Thread Tools | Display Modes |
|
#12
|
||||
|
||||
|
there are different IAT-protection. mostly i saw one type which was easy to fix:
there was a msvcrt._stricmp, and after this a JE. if you change it to JMP, IAT will be auto-fixed. to find this, set a hardware-BP on any IAT-entry and when you are at the command it is written, search up for this stricmp. good luck
|
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Unpackable packer ? | jackdanielz | General Discussion | 9 | 02-12-2003 05:55 |