Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   VBOX upnacking question (https://forum.exetools.com/showthread.php?t=7060)

Jay 06-16-2005 05:04

Quote:

Originally Posted by hobferret
OK ivanov :)

Just very quickly unpacked target with Ollydbg :D

OEP==0056EA64

IAT
START@006C6018
END@006C6E84

So I don't know why you are only "seeing" one function :confused:

Forgot how easy VBOX 4.1 was :D

/hobferret

groan, that was a wasted d/l I hadn't even installed it yet :)

hobferret 06-16-2005 18:07

Jay :)

I would not waste your time unpacking it :D

It's a program for a specific purpose, obviously ivanov needs it for his work/play, fair dinkum to him :D

To be honest I have just kept hold of the IAT in case he comes back for more info, the rest has vanished :eek:

/hobferret

ivanov 06-16-2005 22:06

thanks man, i will try it again now..
btw, why don't you give the IAT table file straightaway? ;-)..

to be honest, someone challanges me whether I can unpack the sw, so I said, I have lots of skillful friends ---> out here <--- :D for asking help.

ivanov 06-17-2005 03:57

I have found the IAT :-), thanks to you, hob. But, the problem remains :-(, I can't run it on Win9x system. Error: ".... file is linked to missing export Advapi32.dll-463". But, anyway, it is enough for me to learn about vbox for now :-)..
thanks guys..at least i got the working exe on win xp sp2..:D

hobferret 06-17-2005 16:31

ivanov :)

Common problem with running programs on different systems are the IAT ordinals :D

WINXP Advapi32.dll Ordinal 0463 is RegCreateKeyW :p

and

WINME Advapi32.dll does not have Ordinal 0463, in ME it's Ordinal 0223 :p

So all you need to do is check out what the values are, the easiest way to repair (change) it is by using LPE :eek:

/hobferret

ivanov 06-17-2005 22:37

you are great man,...i'll try it and back to you when facing a problem ;)


All times are GMT +8. The time now is 23:29.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX