|
|
|
|
#1
06-28-2004, 04:22
|
|||
|
|||
|
Well,
Is that all?
 Just kidding. Your answer give me the info I need. I just don't want to spend my time on a bastard like this one. I'm going back to studying the new Asprotect instead..... regards, hobgoblin 
|
|
#2
06-28-2004, 07:31
|
|||
|
|||
|
here it is... it just miss IAT .use Imprec for IAT
 you can use some PE realigner and PE fixer on it .. just in case
|
|
#3
06-28-2004, 07:41
|
|||
|
|||
|
Quote:
 well body, why don't you do the IAT fix too, I am sure that you'll know then that you haven't taken a step yet. Last edited by BetaMaster; 06-28-2004 at 07:49.
|
|
#4
06-28-2004, 07:51
|
|||
|
|||
|
attached...
|
|
#5
06-28-2004, 16:04
|
|||
|
|||
|
hmmm, thanks ... nice work but where did ordinal at rva 1094 go? I think Real|sty stuck with the same entry.ok, I'll try to find it by myself.
Thanks again Crk for the dump and the IAT tree file.
|
|
#6
06-28-2004, 21:41
|
|||
|
|||
|
can't find it neither..
 maybe is invalid to fool with us ??? if invalid then just nop it
|
|
#7
07-01-2004, 10:00
|
|||
|
|||
|
OK... after analyzing the working IAT for v2.07 i found out that the missing one is DllFunctionCall ... i could be wrong .. but correct me anytime if i'm mistaken ... here are attached new dumped including added IAT + IAT tree for new and old version.
btw the app. still crash always at same offset ... i believe this most be a crc check  btw i used as OEP 0000137A to get the IAT for v3.0.4
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Hybrid Mode
