Log in

View Full Version : IAT, safedisk, frogice


gimmee
January 20th, 2001, 19:57
hi all

i bought a cd in america called realflight r/c simulator to teach me how to fly r/c helicopters before i wreck my own one. Cost me $500 new zealand cause our dollar is sooo low, so i must back it up aye. it is protected with safedisk. while cracking the the cd protection forgice said there where 7 changes to my iat. when i went to run the game again it said it couldn't find the *.icd file, bullshit. i tried to restore the iat.bak with fploader R but when it tried it return an error so no luck.

What is the IAT, how can i view it, and can you back it up manually or something when it gets damaged however. I uninstalled the game and reinstalled it and it works again so back to carcking the safedisk protection. Any replies or links on this muchly appreciated

tsehp
January 21st, 2001, 05:20
iat stands for import allocation table, it's rva is on the pe-header, it's pointing to function/module import names, its resolved by windows to
give your exe some api addresses to be used by your program.

Iat's are very often used as a protection scheme, you just dump your program but iat is still pointing to protection's addresses but not loaded by your dumped program, so it crashes.
I'm actually working on a tool to resolve this problems, it's actually fixings the iat for a lot of protectionh schemes and it's actually being fixed for safedisc based protections, read the tutes on this sites and
write me when you're ready for a beta test.

risc
January 21st, 2001, 09:55
"forgice said there where 7 changes to my iat"

tsehp - i think he means, frogsice detected 7 changes to his IDT ;-)

gimmee - erm anyway, never mind the idt changes, and goto cdchecks.cjb.net and get some reading material on Safedisc ..

Luke
January 25th, 2001, 07:03
IAT = Import Address Table

The Import Address Table is an array of addresses of the imported
routines for each DLL.

Spath.
January 25th, 2001, 14:40
> tsehp - i think he means, frogsice detected
> 7 changes to his IDT

Glad to see at least one person knows what
FrogsICE is about