View Single Post
  #6  
Old 09-20-2003, 00:25
R@dier
 
Posts: n/a
ysco,

stripper v2.03 seems to unpack the other files successfully but
I have not worked out how to fix them yet.

00:17:30 - asprotect detected..
Image Base :00400000
00:17:30 - dumping victim..
00:17:30 - processing import table..
ImportAddressTable RVA :0001a154 - kernel32.dll
ImportAddressTable RVA :0001a1f0 - user32.dll
ImportAddressTable RVA :0001a204 - advapi32.dll
ImportAddressTable RVA :0001a214 - oleaut32.dll
ImportAddressTable RVA :0001a224 - kernel32.dll
ImportAddressTable RVA :0001a238 - advapi32.dll
ImportAddressTable RVA :0001a26c - kernel32.dll
ImportAddressTable RVA :0001a338 - version.dll
ImportAddressTable RVA :0001a348 - gdi32.dll
ImportAddressTable RVA :0001a3d0 - user32.dll
ImportAddressTable RVA :0001a4e4 - shell32.dll
ImportAddressTable RVA :0001a4f0 - ole32.dll
ImportAddressTable RVA :0001a4fc - comctl32.dll
ImportAddressTable RVA :0001a504 - shell32.dll
ImportAddressTable RVA :0001a510 - comctl32.dll
ImportAddressTable RVA :0001a520 - winmm.dll
00:17:31 - fixing import table..
ImportAddress RVA :0001a198 - kernel32.dll!GetModuleHandleA
ImportAddress RVA :0001a1a8 - kernel32.dll!GetCommandLineA
ImportAddress RVA :0001a230 - kernel32.dll!GetModuleHandleA
ImportAddress RVA :0001a2d0 - kernel32.dll!GetModuleHandleA
ImportAddress RVA :0001a2f8 - kernel32.dll!GetCurrentProcess
ImportAddress RVA :0001a2fc - kernel32.dll!GetCommandLineA
00:17:35 - 00bh stolen bytes are found..
EntryPoint RVA :00017a10
! public release
! some files will be not unpacked
00:17:35 - saving unpacked file..
00:17:35 - file was unpacked successful..
00:17:35 - done..
Reply With Quote