I think the OEP is right becuase I tried the same method on a crackme(PEcompact 1.84) and two other targets(exe) after Unpack+IAT rebuild(Imprec) all are working fine
.
But with dll no sucess getting IAT.Also with "XP notepad" i packed with pecompact imprec wont work.
I have a few doubts:
In Unpacked(original) notepad/exe/dll entry point in PE header(PEP) is OEP, Is it Correct?
Is OEP hard coded(present in the file on disk) in PECompacted file?
I tried getting IAT info in Imprec for Notepad98 it gives values but for notepad XP says :
"Could Not Find anything good at this OEP".
I tried changing max recursion & buffer size in options but no use. I think i have to
find IAT manually and fix it.
I am sending U the target while I try confirming the OEP myself because that would give me real confidence.