stealthFIGHTER
July 18th, 2001, 15:39
Hi,
I have a program to unpack and I need help with it. The data sections are:
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
.aspack! <<<
I thought it was packed with Aspack but at the end of the file there was a text:
Packed with PE-Pack v1.0 etc.
When I manually unpack it [At JMP EAX was EAX=00441D8C].
I changed the entry point from 1F68F to 41D8C [441D8C-400000 - is this right?].
When I run the program I get some error - but - I can disassembly this program now (I can see all Import tables and SDRs).
I tried to unpack it with ProcDump >>> GPF and no IT and SDRs).
I appreciate any help.
Bye
sF
I have a program to unpack and I need help with it. The data sections are:
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
.aspack! <<<
I thought it was packed with Aspack but at the end of the file there was a text:
Packed with PE-Pack v1.0 etc.
When I manually unpack it [At JMP EAX was EAX=00441D8C].
I changed the entry point from 1F68F to 41D8C [441D8C-400000 - is this right?].
When I run the program I get some error - but - I can disassembly this program now (I can see all Import tables and SDRs).
I tried to unpack it with ProcDump >>> GPF and no IT and SDRs).
I appreciate any help.
Bye
sF