MUP Arm 4.xx Code Splicing+Rebase IAT: GameJack 5.0
转自:exetools
贴者:hacnho
PS: Sorry: The target is not contain option Import Eliminat. So, i think my method can apply some target protect with the option Import Elimination. Because we redirect the virtual IAT that armadillo make in Memory to the a real cave memory. The important step is find IAT start and IAT end and redirect the table to an cave in .adata section. Tested this method OK with the unpackme of SnD with the option Code Splicing+Import Elimination