![]() |
|
#1
|
|||
|
|||
|
Unpack OneWay.dll problem,Import REConstructor v1.6 Final fails.
I unpacked OneWay.dll.(www.atma-software.com/1way)
This is the OEP I thought . Code:
003D8458 55 push ebp 003D8459 8BEC mov ebp,esp 003D845B 83C4 C4 add esp,-3C 003D845E B8 58833D0>mov eax,OneWay.003D8358 003D8463 E8 BCDCFDF>call OneWay.003B6124 003D8468 33C0 xor eax,eax But When I choose OneWay.dll. The Imagebase in the Log window is 00400000. So I couldnot fix the unpacked dll. see the attachment for two pictures discribe the problem I met. What's the problem? Import REConstructor bug? Are there any alternative tools to fix the import table? Confused. Any comment is appreciated. Thx! ------ Is this the same question of my previous thread? http://forum.exetools.com/showthread.php?t=8612 Maybe this dll first packed with asprotect,then PEcompact. Regards Last edited by winndy; 01-06-2006 at 23:55. |
| Thread Tools | |
| Display Modes | |
|
|