Hi..i noob in unpacking files..if read Labba tutorial and others oh how to unpack. Im stuck with trying to recreat IAT using Imprec. All the tutorials i read says that 'we have to click on the 'IAT autosearch button' and change the RVA size to 1000. then get imports and fix the invalids.

However when i click 'IAT autosearch' button it says that 'Could not find anything good at this OEP' does this mean i need to put the spesific OEP for the programme? (which i think is the case) if so can anyone give me a link to a tutorial on how to get the OEP? coz i been searching and and reading and i still cant recognize the OEP. My understanding is that it is where the programe starts? but sometimes the programes gives fake OEP and therefore we need to search for examplee 11bytes be4(in the case in labba's tutorial.) why 11?

Thanks for your help. =)

1.first you must get the correct OEP
2.then you can use importrec to get iat .

But when using imprec with other programme like the prog in Labba's tuttorial, this msg did not show even though i was using the defaults and just straight hit the "IAT autosearch". Only with the programme im trying to unpack it display "'Could not find anything good at this OEP'

i tried again with another prog protected wif ASPR 1.23 and no error msg came. Only with the programme im trying to unpack the "could not find anything good on this OEP'.

Wondering whats wrong, i tried use the FEUERRADER [AHTeam] tool to unpack it and find out wat i did wrong. Few hours i left it and it just like anyalizing the file and nothing else. So i guess something is wrong.

Double check wheter it was ASPR 1.23 protected and it was.