I'm trying to unpack a program packed with svkp 1.3x. When I find the OEP, dump it and run the dumped exe I get an error. I know I should repair the import table, but when I run ImpRec it says "96 unresolved imports". How do I do that so the dumped program runs normally and I can crack it?

P.S.: Is there a way to post a link to an external page so you can see what I'm talkin' about?


R.E.S.P.E.C.T.

unresolved imports.. trace them, you'll find svkp takes some imports himself like GetCommandLineA, along with the svkp exports that can be included like svkp_killdebugger etc.. use the search button and look up svkp, then start tracing it

good idea, but when i hit the search button to trace it says: "Could not find anything good at this OEP! :-("
something's wrong with this proggie... any other suggestions?


R.E.S.P.E.C.T.

siddhartha:

Perhaps evlncrn8 was suggesting that you try the "search" button here. You did read the BIG RED LETTERS didn't you?

There are several threads on svkp and a few even on svkp 1.3 already contained in the Forums. Have you read those to see if they assist in your searching for a solution?

There are also several threads on exetools regarding this protector. You should also review those. Try reading those and see if they give you any hints to try. If not come back and ask for further help.

Regards,

Dear JMI, I did read all the threads at this forum and exetools also, but it didn't help me. I searched a thousand times, and I requested a generic tutorial on svkp on exetools indeed... so, other suggestions?


R.E.S.P.E.C.T.

good suggestion : debugging it, and finding the answers for yourself, most tuts are meant as examples, not 'heres how to crack protectionx on a silver platter'.. digest them, play with them, learn for yourself

for svkp basically u gotta find the missing ep bytes (if that option was used during packing) and resolve the missing imports, i know svkp has at least 10+ 'internal' apis that it sticks into the import records, experiment

pm me the info on the target, i'll have a look and see if i can help you with your missing imports