Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #4  
Old 01-30-2004, 00:53
Barry Barry is offline
Friend
 
Join Date: Dec 2003
Posts: 84
Rept. Given: 10
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Barry Reputation: 2
It must be the import rebuilding that screws everything up because the Packed EXE works in Win9x/WinXP. When I enter the OEP into Imprec and click the IAT Autosearch it tells me it has found something but it does not find any imports when clicking the Get Imports button! Imprec gives me an RVA and Size to enter if it fails to find anything, but entering them eventually crashes imprec?

I have to manually use the Get API Calls option and delete the inavlid entries. This allows me to use the Fix Dump option and the EXE then works, but only in the current OS.

I tried Revirgin too but that just seemed to freeze the app when I enter the OEP and clicked the Fetch IAT button!! I also tried using Olly and Ollydump to fix imports using Method 1 & 2 but no luck with that either, so I think that's why it has to be dumped and manually fixed.

If you look near the end of a UPX file with a Hex Editor you can see the DLL's and API's the program needs, so I tried to delete all the API's I didn't need via Imprec but still no luck!

I've got a few utils that have PE header fixers for NT/2K/XP such as PEditor 1.7 but they don't help when I unpack in WinXP and the prog won't run under Win9x!
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Write Access on Win9x nikola General Discussion 2 04-27-2005 20:23
Unpacked Files under XP SP1 doesn't work on SP2 ivanov General Discussion 7 04-21-2005 21:51
SoftICE (DS 2.6 || SS 2.6) + ICEDump 6.025 + win9X --> Not Work fine? sky General Discussion 1 09-19-2002 09:51


All times are GMT +8. The time now is 10:25.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )