Log in

View Full Version : Unpacking a .DLL


KoKaINe
April 18th, 2001, 17:53
Ive read some tuts about unpacking a .exe and have also unpacked a couple by my own. But now I have a packed .dll Ive coded a little asm program(below) that calls LoadLibraryA but I think it doesnt gets me to the entrypoint. The dll is attached to this msg. Any ideas? Can I use the symbol loader?

Thanks,
KoKaINe
---
.data
MsgCaption db "KoKaINe.br",0
MsgBoxText db "DLL Loaded!",0
DllName db "Common.dll"

.code
start:
invoke LoadLibraryA, addr DllName
invoke MessageBox, NULL,addr MsgBoxText, addr MsgCaption, MB_OK
invoke ExitProcess,NULL
end start

hz
April 18th, 2001, 21:50
hiya,
good question, unfortunately NOone around here can unpack a .dll }>

Zedr0n
April 19th, 2001, 09:24
You know, I myself, when I reversed CruddMe 3.0(look at http://crudd.cjb.net) done this way:

a) I dumped the dll using ProcDump;
b)Then reversed it with IDA, got the idea...
c)Then made a runtime patch(using the offset got from IDA).
d)Everything worked )

Zedr0n
April 19th, 2001, 09:30
And, by the way, if you want to use the symbol loader to debug the dll, you'd better take iceLoad for this from the IceDump Team page(http://http://ghiribizzo.virtualave.net/icedump/icedump.html). It allows you to load dll's. That's all.