I'm trying to unpack this exe, i've tried Aspack2.12 - and i can't rebuild the IAT - I HAVE NO CLUE HOW :P

Can anyone point me to a basic tut on how to rebuild iat's

Oh and another thing, this exe has strange section headers, Like MackT FISH topo0 and lovetzl ?

anyone recognise these?

Mackt is added import section by Import REConstructor. That is tool for fixing IAT and you can find it on the net. That tool can easy fix IAT at most packers and some protectors. You have good tutorials on old biw reversing forum.

nmanma, section named MackT suggests it has been unpacked already, maybe repacked?. Try http://www.yates2k.net/peinfo.html ("http://www.yates2k.net/peinfo.html") for iat related info.

Btw, ASPack and lot of others packers and protectors have option to change sections name. That is why sections have weird names. Also you can change section name by your self just editing it with hex editor.

This exe has been passed around like a penny, its a heavily modified game loader thats used to hook dll's into the process (Not CS/HL related ) its for an rpg im playing with and its chinese, so its been packed, unpacked, modified, repacked.

it was originally packed in PE Encrypt, but they some how decrypted it, and packed it in a less evil packer, i've managed to unpack the dll's its just this being evil.

if i can change the headers in HEX can i then use a compiled unpacker?