FThunk RVA Import Problem Need Help

		Exetools > General > General Discussion
FThunk RVA Import Problem Need Help

04-20-2019, 16:57

deepzero

VIP

Join Date: Mar 2010

Location: Germany

Posts: 310

Rept. Given: 115

Rept. Rcvd 64 Times in 42 Posts

Thanks Given: 195

Thanks Rcvd at 224 Times in 95 Posts

1. upx -d works perfectly. If your exe doesnt run after, it's because of an integrity check. Debug it.

2. your OEP is right, but I dont know how you arrive at those IAT numbers. Using the same scylla version as you, scylla correctly finds the entire IAT with VA:004AE5C0 and Size:0000042C.

3. Hint: For the integrity check, look around 0x00489BC6.

Once the integrity check is patched, the unpacked file works.

The Following 4 Users Say Thank You to deepzero For This Useful Post:
Indigo (07-19-2019), Mendax47 (04-20-2019), niculaita (04-21-2019), tonyweb (04-21-2019)

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
import ida_bytes problem	eychei	General Discussion	8	04-12-2018 02:27
Unpack OneWay.dll problem,Import REConstructor v1.6 Final fails.	winndy	General Discussion	3	01-07-2006 10:22
Import Rebuilding Without Import Table	Kerlingen	General Discussion	11	01-13-2005 10:24

All times are GMT +8. The time now is 23:09.