|
dear MaRKuS-DJM & other unpackerz
maybe I already mentioned:
Please, don't resolve improts for such like packers, which keeps original ImportTable.
(aspack,telock,PECompact..)
using resolver on them indicates quite low level in unpacking..
instead debug & dump them, when unpacking in memory just finished;
then find original IT in dump & set new values in PE-header.
|