Log in

View Full Version : Help with unpacking


fozayr
December 5th, 2005, 13:21
Hello,

I am a newbie and I was trying to unpack a UPX file manually. I loaded it into debugger and ran and dump. Then I manually fixed the import table. The next thing I did was to fix the Entry point. However, when I am done with all these I got this nasty error:

---------------------------
test.exe - Entry Point Not Found
---------------------------
The procedure entry point could not be located in the dynamic link library KERNEL32.DLL.
---------------------------
OK
---------------------------

Any idea, what mistakes I made?

Ricardo Narvaja
December 5th, 2005, 14:22
with only this little description is very hard undrestand your problem, but i think you donīt rebuild the iAT perfect, there are an error in the iat rebuild procedure.

Ricardo Narvaja

fozayr
December 5th, 2005, 21:36
What details do you need to help?

Ricardo Narvaja
December 5th, 2005, 22:20
the more common error is the location of the start and size of IAT and the value of OEP for sill in IMPORT RECONSTRUCTOR, how do you get this values?

Ricardo Narvaja

fozayr
December 5th, 2005, 23:28
Wow thanks. I fixed it and my program worked as smoothly as a baby.

So my problem was that my import table was not fixed properly..