Log in

View Full Version : Winxp & dumping


Ray
December 11th, 2003, 09:03
Hi,
winxp is indeed picky with its dumps. The attachment is just notepad compressed with UPX. it should be an easy job, but winxp refuses to complete it!

After dumping the file, I tried rebuilding the file, but lordPE reports a Non-complete import table. of course the prog does not run.

The only way to make the dump to work is to use revirgin or something similar to recreate the import table.

Is this problem common to all WinXp users here? or am i just messing up?

Thanks.

Ray
December 11th, 2003, 09:07
Oopps

nikolatesla20
December 11th, 2003, 13:32
WinXP is no more picky really than Win2K. But I would try another target other than NOtePad. Notepad is highly specialized for Windows, and uses some esoteric features such as bound imports, blah etc. It's a pain.

-nt20

Ray
December 11th, 2003, 14:26
nikolatesla20,
thats great.

waiting for your comments.

Ray
December 12th, 2003, 17:32
Evaluator,
Maybe i wasnt clear.
Upx supposly does not mess up the import. So, a pure dump at EOP will be enough. At least it works on win98 !

But on XP it does not work. Your dump is fine! But you used ImpRec to recreate the import table!
So my question goes again : Why!? is this common?

evaluator
December 13th, 2003, 04:17
Ah!
So your question is:"Always I must recreate import or no?"
!?

Yes, always.

****
DELE

Ray
December 13th, 2003, 04:28
thanks for clearing things.