i unpacked a file with olly, the i dumped it with ollydump, and try to fix it with revergin and imprec, but no one managed it to fix the WS32_2.dll imports.

the packer is a very simple one, so i don't think there are any anti-iat-fixing tricks.

when i look at the call with olly it looks like this

call address1

address1:
jump[address2] address2= WsaStartUp

so i'm pretty sure that there isn't any iat redirection.

is this a know problem ? is there any solution ?

sorry for this noobish question.......

WS32_2.dll only exists on win98 or winme? Just my 2 cents

could be also it imported ws2help.dll (think thats the name) that forwards to the ws2_32.dll, which would give you the jmp [address_containing_va_of_wsastartup]

Not "WsaStartUp", it should be "WSAStartup".
Client: Included in Windows XP, Windows 2000 Professional, Windows NT Workstation, Windows Me, Windows 98, and Windows 95.
Server: Included in Windows Server 2003, Windows 2000 Server, and Windows NT Server.
Header: Declared in Winsock2.h.
Library: Use Ws2_32.lib.