pe-compact

I have been having problem trying to unpack a Pe-compact 1.68 packed dll. Any ideas how to get around this.
Please help.

I have also tried inline patching .....yet it doesn`t work as i expected

Are you sure the patch is correct? First try to patch it in memory (sice, ollydbg) to see if it works correct.

Patching in memory with ollydbg works, but when i try to inline patch it doesn`t work.Maybe my patch gets overwritten by unpacker code..i suppose. Is there any cool method to find blank space to inject code? I usually inject code at the end of any section.

[MaRKuS-DJM]

Originally posted by DCZ
Patching in memory with ollydbg works, but when i try to inline patch it doesn`t work.Maybe my patch gets overwritten by unpacker code..i suppose. Is there any cool method to find blank space to inject code? I usually inject code at the end of any section.

i think it's the same as with aspack... the jump to the oep is written while unpacking... set a "memory on write" breakpoint in ollydbg on the oep-jump. then you will see the "bad code".

if you have no space for inline-patching, use this litte tool (attachment) zeroadd... it adds an empty section where you can write your inline-patch.
i hope this helps.

MaRKuS TH-DJM

@MaRKuS-DJM

Thanks for the tool

R@dier