![]() |
|
#4
|
|||
|
|||
|
It must be the import rebuilding that screws everything up because the Packed EXE works in Win9x/WinXP. When I enter the OEP into Imprec and click the IAT Autosearch it tells me it has found something but it does not find any imports when clicking the Get Imports button! Imprec gives me an RVA and Size to enter if it fails to find anything, but entering them eventually crashes imprec?
I have to manually use the Get API Calls option and delete the inavlid entries. This allows me to use the Fix Dump option and the EXE then works, but only in the current OS. I tried Revirgin too but that just seemed to freeze the app when I enter the OEP and clicked the Fetch IAT button!! I also tried using Olly and Ollydump to fix imports using Method 1 & 2 but no luck with that either, so I think that's why it has to be dumped and manually fixed. If you look near the end of a UPX file with a Hex Editor you can see the DLL's and API's the program needs, so I tried to delete all the API's I didn't need via Imprec but still no luck! I've got a few utils that have PE header fixers for NT/2K/XP such as PEditor 1.7 but they don't help when I unpack in WinXP and the prog won't run under Win9x! |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Write Access on Win9x | nikola | General Discussion | 2 | 04-27-2005 20:23 |
| Unpacked Files under XP SP1 doesn't work on SP2 | ivanov | General Discussion | 7 | 04-21-2005 21:51 |
| SoftICE (DS 2.6 || SS 2.6) + ICEDump 6.025 + win9X --> Not Work fine? | sky | General Discussion | 1 | 09-19-2002 09:51 |