![]() |
|
#17
|
|||
|
|||
|
As a rule, when I manually unpack ASProtected apps, I always remove the ASPR sections (.data and .adata in this case), and put the imports in the original .idata section (22A000 in this case) instead of in a new section (.mackt) as ImpRec does by default. I do this because these sections seem to me to be entirely unnecessary, and only waste space by making the exe bigger.
Having done that, this app's behavior seems (to me) to be consistent with every other ASPR'd app I have ever dealt with. I was able to unpack it without problems, it's just that my methods of doing so seem to be much different than yours. If you get a chance to try it, I would be interested to see if your method of fixing the dumped file works with these sections removed. Regards, Satyric0n |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| one newbie question | SubzEro | General Discussion | 7 | 03-12-2015 06:05 |
| ASPR, ARMA question | sgdt | General Discussion | 3 | 04-09-2006 03:38 |
| ASPR 1.2 question | gabri3l | General Discussion | 42 | 05-01-2004 15:09 |
| a newbie question about CRC32 | abccc | General Discussion | 13 | 04-23-2004 03:13 |
| "newbie" question for crackers ;) | newbie007 | General Discussion | 4 | 10-07-2003 04:46 |