

GMT rFactor2 ERP (F1-2015) PSSG (F1-2010 – F1-2014 GRID 1 & 2 & AutoSport) VHF SGB and MEB (NFS Shift) GMT (RACE ON, RACE07, RACE, GTR2, GTR, GTL, rFactor) TRK (GTR2, GTL) CAR (GTR2) VEH (rFactor) SCN (rFactor, NSR, F1CC, F1-2002) GRF (Viper Racing and Nacsar Heat) MOD (Viper Racing and Nascar Heat) PTF (N2003,N2003,N4)

click show invalid and as you mentioned I have 4 bad entries in IAT.Ġ07F2288 774EC318 KERNE元2.GetModuleHandleExWĠ07F254C 76E138D5 OLEAUT32.VariantClearĠ07F2564 75C0F9E7 SHEL元2.SHAppBarMessage click Get Imports and Imprec rebuild the IAT I am reading some tutorials how to unpack Armadillo manually as this packer removes the IAT and is a good exercise on how to rebuild it from scratch.

I did what you said and dumped the unpacked proccess. Sorry for bothering you but I have tried to rebuild the IAT but without success. I forgot to tell you to check all the exceptions, so they are passed to the packer! Both MUST return 0 in EAX, but they also return data in the stack, so be careful with that.Īnd that should be enough to remove the packer. You'll have to wach what happens in each of those 3 (what registers are modified and what is modified in the stack). The other 3 are used by the program to comunicate with the packer. The first is ExitProcess (the same as the tutorial). Now you can dump and rebuild IAT with ImpRec. PS: Feel free to reply in spanish as I can read spanish perfectly, just cannot speakĠ0702742. I open the program in Ollydbg v2 and I got in the PC Guard OEP: I already tried this tutorial and many others. Sorry for replying in english, I can read spanish but not speak, I asked my wife to translate for me.
