I need help to unpack this kind of protection... I think i found the OEP but the IAT is a problem.. (Target: Cpuc**l latest version (17/02/2002)

You need to find IAT manually then use ImpRec, IAT is not even mangled with...

Funny, my dump is even smaller than the original, Podien really write a great piece of code!


Bt the way, which program did you use to identify the packer as PcGuard??

Thx i have found where the packer decrypt the IAT and i have fixed the IT manually. Now the dump work perfectly. I've tried Imprec and Revirgin but seems don't work with this kind of protection... I'll do all manually. I 've found that Cpucool is Pc-Guard protected on this forum (search Cpucool)