Armadillo Import Elimination

		Exetools > General > General Discussion
Armadillo Import Elimination

09-26-2004, 23:47

xzz

Posts: n/a

....

if its only one api call, wrong placed you can fix it simple,
look your last iat area find the "ReqQuerryValueEx" where placed (on rva)
then patch islike this (opcode)
FF25xxxxxxxx (the xx is rva + imagebase then inverted e.g FF25B3A14000)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
More Armadillo - import reconstruction	FEARHQ	General Discussion	8	09-19-2005 16:46

All times are GMT +8. The time now is 05:26.