Log in

View Full Version : How to repack a file


Limee AKA Lamer
October 7th, 2004, 07:17
I unpacked a upx file manually.
Then I want to repack it with petite,
but it does't work,why?

dELTA
October 7th, 2004, 08:29
Did the unpacked file work in the first place?

One good guess would be that the imports of your unpacked exe have hardcoded adresses (i.e. not fully rebuilt IAT), which could cause this kind of behavior.

Limee AKA Lamer
October 7th, 2004, 09:28
The unpacked file can work smoothly,but it can't be
repacked by petite2.2.When it be repacked,then it
can't work.


Quote:
[Originally Posted by dELTA]Did the unpacked file work in the first place?

One good guess would be that the imports of your unpacked exe have hardcoded adresses (i.e. not fully rebuilt IAT), which could cause this kind of behavior.

Limee AKA Lamer
October 7th, 2004, 12:24
Can you explain the meaning?
thanks.

Quote:
[Originally Posted by dELTA]Did the unpacked file work in the first place?

One good guess would be that the imports of your unpacked exe have hardcoded adresses (i.e. not fully rebuilt IAT), which could cause this kind of behavior.

dELTA
October 7th, 2004, 12:40
When you dump an app from memory, the import data might be in a state that makes it not resolve the imports again when the dumped exe is being loaded from disk, but it rather uses the exact same addresses that were resolved for the imports in the dumped app instead. This might confuse a packer in the way you describe.

Anyway, read some info about dumping and import rebuilding, and it will all become much more clear.