jingjang
May 28th, 2004, 21:01
Hi..i noob in unpacking files..if read Labba tutorial and others oh how to unpack. Im stuck with trying to recreat IAT using Imprec. All the tutorials i read says that 'we have to click on the 'IAT autosearch button' and change the RVA size to 1000. then get imports and fix the invalids.
However when i click 'IAT autosearch' button it says that 'Could not find anything good at this OEP' does this mean i need to put the spesific OEP for the programme? (which i think is the case) if so can anyone give me a link to a tutorial on how to get the OEP? coz i been searching and and reading and i still cant recognize the OEP. My understanding is that it is where the programe starts? but sometimes the programes gives fake OEP and therefore we need to search for examplee 11bytes be4(in the case in labba's tutorial.) why 11?
Thanks for your help. =)
However when i click 'IAT autosearch' button it says that 'Could not find anything good at this OEP' does this mean i need to put the spesific OEP for the programme? (which i think is the case) if so can anyone give me a link to a tutorial on how to get the OEP? coz i been searching and and reading and i still cant recognize the OEP. My understanding is that it is where the programe starts? but sometimes the programes gives fake OEP and therefore we need to search for examplee 11bytes be4(in the case in labba's tutorial.) why 11?
Thanks for your help. =)