![]() |
|
|
|
#1
|
||||
|
||||
|
OEP: 44B6E9
IAT attached please compare... is your OEP wrong or your IAT? ImportRec can resolve every import of y0das cryptor through trace level 1 Regards |
|
#2
|
|||
|
|||
|
hmmm ???
my oep is the same but my iat is not the same ,I cant understand why may i have some wrong options on my olly ?? I dont know what the right options for debugging ,because I have use ever sice on win 98 now I use olly since 2 weeks ,can someone help or tell me how make I the right option thanks |
|
#3
|
||||
|
||||
|
if OEP is right, you have done everything right with olly.
then use imprec, insert OEP (the one without image-base from ollydump), click IAT auto search, get imports... then click show invalid, right click and Trace Level One (Disasm), and all is valid. then fix dump. good luck. |
|
#4
|
|||
|
|||
|
shit wont not work ,I THINK I make anything with imprec wrong ,maybe wrong options
|
|
#5
|
|||
|
|||
|
Nothing wrong with me. What are your Windows version ? ImpRect settings for 9x/Me have some differences with WinNT/2000. This is my settings for ImpRec on my Win2000 Server and the unpacked file.
Regards |
|
#6
|
|||
|
|||
|
thanks for unpacking,but I have testet unpack and fix on my Notebook with xp ,want work here on my pc w2k work only unpack but I cant fix the *.exe
I dont Know why I'ts can be soo hard ???? |
|
#7
|
|||
|
|||
|
Do not check "Import all by Ordinal" on ImpRec options.
Good luck |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| yoda's protector v1.0b | bukkake | General Discussion | 0 | 08-22-2004 16:26 |