View Single Post
  #104  
Old 02-16-2004, 20:05
Satyric0n
 
Posts: n/a
As a rule, when I manually unpack ASProtected apps, I always remove the ASPR sections (.data and .adata in this case), and put the imports in the original .idata section (22A000 in this case) instead of in a new section (.mackt) as ImpRec does by default. I do this because these sections seem to me to be entirely unnecessary, and only waste space by making the exe bigger.

Having done that, this app's behavior seems (to me) to be consistent with every other ASPR'd app I have ever dealt with. I was able to unpack it without problems, it's just that my methods of doing so seem to be much different than yours.

If you get a chance to try it, I would be interested to see if your method of fixing the dumped file works with these sections removed.

Regards,
Satyric0n
Reply With Quote