VBOX upnacking question

[ivanov]

yes, i have followed that tuts and also the one from D-jester. It "seemed" I reached the OEP, but no exe's worked. Please, I need more guidance. Here is my target:
h__ttp://www.qfile.de/dl/33934/target.rar.html.

[Jay]

Originally Posted by ivanov

yes, i have followed that tuts and also the one from D-jester. It "seemed" I reached the OEP, but no exe's worked. Please, I need more guidance. Here is my target:
h__ttp://www.qfile.de/dl/33934/target.rar.html.

hey ivanov,
target requires at least 2 non-system dll's not included in the archive.
vboxp410.dll
GEAR32PD.dll

[D-Jester]

Hello ivanov, please PM me with a download link for the FULL package, I can't run this on my system without its dependacies.

Thanks

[hobferret]

Hi ivanov

Likewise, PM the link

Don't know what exactly the program is but sounds like some old Adobe thing

/hobferret

[ivanov]

I have tried Lunar_Dust tuts "Unpacking VBOX 4.6.2 (Privilege Client)
Semi - Manually�..". I don't fixed the import table, just change the EP manually after dumping the program using LordPE. It works fine on Win XP SP2. But, I cannot run it on Win ME. It seems IAT is the problem, but I am not sure to fix it, :-).

The only imported function I see when loading the original program into ImpRec, entering the OEP I just found (using Lunar_Dust tuts, or the one that PEiD suggested), is Kernel32.dll. I don't know why ..:-).

[hobferret]

Hi ivanov

Is it by any chance set last error

/hobferret

[hobferret]

OK ivanov

Just very quickly unpacked target with Ollydbg

OEP==0056EA64

IAT
START@006C6018
END@006C6E84

So I don't know why you are only "seeing" one function

Forgot how easy VBOX 4.1 was

/hobferret