This target has two "data" sections, one called ".idata", and another called ".rdata". DilloDumper only takes an educated guess at which section the Import Table is in, so if you had trouble getting the import table, this could be why. I never got it fully debugged for multiple sections like this program has.

Anyway, the ".idata" section is at offset 158000
and the ".rdata" section is at offset 157000

DilloDumper should have given you one of these numbers. If the one if gave you didn't work, then try the other one by manually typing it into ImpREC instead of the first number you already tried, and see if you can then find the imports. If DilloDumper was able to actually dump the program, the import table should be there, clean, somewhere. Just have to find it.


Here is the Import table I got....looks like the file still has some bad pointers...it starts but crashes. Could be that it's looking for the Arma shell now, so it had to be tricked yet.



-Lunar