I try OLLYDMP 2.0 with a program compressed with EZIP and with the option for found OEP , the program stops in the correct entry point very well.
I try dump with ollydmp and a messages saying VCL50.bpl not found apears, the archive dumped works prefectly.

This messages for VCL50.bpl are normals, in the dumping? In this packer the results are very good and the dumped works well but this not will be trouble for other packers?

Ricardo Narvaja

VCL50.bpl is a file from Borland C++ Builder 5, so either the program your dumping, or Ollydmp needs the file to run properly.

I think ollydmp need the programa running dont ask for this file anda run well.

Ricardo

OllyDump v2.0 uses rebIT.dll to rebuild IAT.
This dll is Delphi program, so it may need vcl50.bpl.
Please install the bpl file to use rebIT.dll.

Now I'm trying to translate the dll's source to C.

Where can you find the source to rebIT ?

I find 5 archives OLLYDMP 2.0 uses, but DSS50.bpl i not find in Internet, anybody kwow one link to download this file.


Ricardo Narvaja

Puzzling. DSS50.BPL is Borland's Decision Cube Component Package - why would a process dumper require this file ?

I dont know, requires many files

VCLDB50.bpl
VCLBDE50.bpl
DSS50.bpl
VCL50.bpl
VCLX.50.bpl


The other files i found but DSS50.bpl not
Ricardo Narvaja

I found all files needed thanks.

Ricardo Narvaja