Im new at this.. but I used OllyDbg to unpack a scarmbled UPX file.. after its unpacked i dumped it first used PE Tools... then when I tried running the prog with the fixed .DLL it said it wasnt a valid windows image. Then, I search a bit and found OllyDump. So I go through the steps and unpack it then i go to ollybump-find OEP then i go to dump and dump the file. Now when I try to run it I get the message: "The procedure entry point RitRestoreLastWin32Error could not be located in the dynamic link library kernel32.dll".. help please? Thanks in advance

OllyDump can't resolve all the imports. When you dump the file with OllyDump, then you must rebuild imports with a tool like ImpRec. I am sure you did not yet rebuild IAT.

old ollydmps (2 or less versions) make dumps with table reconstructed well in easy packers (upx etc), but in new versions, not work well in all SO languajes, the new versions of ollydmp in my spanish SO, only repair 20 or 30 % or the dumpings of easy packers and with the mark in METHOD 2 of rebuild options enabled in METHOD 1 make a mess.

Ricardo Narvaja

for instance is better work with IMPORT RECONSTRUCTOR for more general solution.

Learn to work with IMP REC is better.

Ricardo Narvaja