I found OEP with SoftICE
OEP is 1000, Image base is 00400000
After rebuild with ImportREC, it show "success" message

But I run this unpack file error!!
I run it error if this file have section .RDATA, .IDATA or .BSS
(I run OK if this file have only section .TEXT, .DATA and .RSRC)

Could someone help me, plz
Thanks!!!!

Hi,
did you dump the file using procdump or lordpe? properly after sending the prog into an infinite loop?

Thomas

did you dump the file using procdump or lordpe? properly after sending the prog into an infinite loop?

First, I used ProcDump to dump memory to file(dump.exe)
then I used ImportREC to rebuild IAT/IT of dump.exe
After finish, then filename is dump_.exe

I run dump_.exe, SoftICE will pop
I press F5, then OS show error message