Log in

View Full Version : Aspack unpacked dll relocations ignored


djpaul1963
August 5th, 2003, 07:35
Hello,

I unpacked with Aspackdie 1.4 a dll packed with Aspack 1.12 and I fixed the base relocation directory address and size because they were wrong. Now I can see the relocs from inside PE Tools but when the dll is loaded from the program it seems the relocations are ignored from the PE loader (win2000). All relative address remain at their original linked values (1000000 is the image base but the dll is loaded at 46C000 usually). I don't have win 98 installed to see if it's a Win 2000 problem only, but maybe someone of you may have the answer already?

Thanks in advance

Dj

djpaul1963
August 5th, 2003, 12:24
Well,

After tracing inside ntdll i discovered that relocations fixup was indeed taking place but somehow the image base of the dll was set to an invalid value (FFFFFFFF) and therefore all thins got messed up!
I don't know how this happened but now it's fixed and the dll is loading just fine

Thanks,

Dj