![]() |
|
|
|
#1
|
|||
|
|||
|
armkiller imports
hello i cant find the import tabel with armkiller and imprec.what i need to find the real tabel.the output file from armkiller (eip.bin) shows me the hex values d9450200 .i think the values are not correct!Can sombody help me to find the adress with softice?i have a problem to find oep !i dump the protectet file with armkiller! and set bpx setprocessworkingsetsize !i go to call edi and find the value 004245d9
i put this value to imprec (oep):then imprec says invalid oep im processmemory! i cant find import tabel!Whats wrong? Last edited by Akki; 12-30-2002 at 01:35. |
|
#2
|
|||
|
|||
|
wops�
Hi! ... i have this problem ..ook ..remember that the coders update software protection and if u have one software protected with armadillo 2.65 .. i think that armadillo killer 2.61 ..it did not work! ...(I do not have idea if works with new versions) ..
and now.. All Delphi & Builder C++ programs put the IAT in the ".idata" section. If you look in PEditor or in LordPE at this file, you will see the .idata section .. Regards..
|
![]() |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| KERNEL32 imports in IDA Pro | pez | General Discussion | 9 | 08-27-2004 05:10 |
| Armkiller 2.61 | Unpacker | General Discussion | 15 | 02-01-2003 09:00 |