View Single Post
  #7  
Old 11-18-2005, 04:24
deroko's Avatar
deroko deroko is offline
cr4zyserb
 
Join Date: Nov 2005
Posts: 217
Rept. Given: 13
Rept. Rcvd 30 Times in 14 Posts
Thanks Given: 7
Thanks Rcvd at 33 Times in 16 Posts
deroko Reputation: 30
here it is, dumped dll with loader in it, addsec.asm is source of api-loader for dll, and eliminate.asm is code for anti-import-elimination, it can't fix mov eax, value (5byte long opcode and those should be fixed manualy, 6-7 of them in the code as I remember )
hxxp://rapidshare.de/files/7776475/armadll.rar.html

cheers

Last edited by deroko; 11-18-2005 at 09:42.
Reply With Quote