Armadillo IAT Rebuild

[atzplzw]

Thanks very much for your help!

I already played in the call you mentioned but couldn't find the magic jmp.
After I now again dumped and fixed the imports I get a 1 Mb exe while yours is smaller. Also mine doesn't run.
So what did you do to it to make it smaller and runable?

[Newbie_Cracker]

Make sure you dumped it correctly. Don't use dumper plugins of OllyDbg. Both of them (OllyDump & Olly PE Dumpder) have problem with Armadillo. Try other dumpders like Lord PE & PE Tools.

Make sure you fixed all imports. I said patch JE to JMP, but you should put hardware bp on that CALL and run it again.

To make it smaller, wipe 3 sections before .rsrc which are Armadillo codes or use on of them for import addresses and wipe 2 of them.