|
|
|
|
#1
09-26-2004, 23:47
|
|||
|
|||
|
....
if its only one api call, wrong placed you can fix it simple,
look your last iat area find the "ReqQuerryValueEx" where placed (on rva) then patch islike this (opcode) FF25xxxxxxxx (the xx is rva + imagebase then inverted e.g FF25B3A14000) 
|
|
#2
09-27-2004, 02:02
|
|||
|
|||
|
no... its not only one function...
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| More Armadillo - import reconstruction | FEARHQ | General Discussion | 8 | 09-19-2005 16:46 |
Hybrid Mode
