Quote:
Originally Posted by azry_rulez
wow thanx .. ill try later~
|
IAT start
008692CC 77DA5DCF ADVAPI32.RevertToSelf
IAT end
$+116C >74CB4BAF oledlg.OleUIBusyW
$+1170 >00000000
If you now use UIF then enter as new IAT address 008790AC
New IAT start
008790AC 77F4157D ntdll.RtlGetLastWin32Error
New IAT end
$+CE4 >76BB32DD psapi.EnumProcesses
$+CE8 >00000000
At universal import fixer fill in
008692CC (Code start)
$+116C >74CB4BAF oledlg.OleUIBusyW (code end)<<<<< i duno $+116C is wad address .... if i can get the address .. then crack done
008790AC(New IAT VA)
then after u fixed with UIF launch imprec and fill in OEP 004FC5ED and Rva and size in the UIF menu and dump it and fix dump and done