badu
09-19-2006, 08:18 AM
I've been trying to uncompress the attached DLL which has been packed with PECompact 2.4x (guessed!). Used OllyDbg and following the code, I've found the OEP at RVA(offset):16D708 (RVA:16E708).
After that, I've dumped the DLL using the OllyDumper plugin and modified the entry point according to what I've previously found.
The problem is that, even I'm able to see all the imports, exports and resource sections correctly with various tools (e.g. lordPe, importRec, peEditor) - I'm not being able to load the DLL in any application. I keep receiveing the following error:
"The application or DLL excel.uncompressed.dll is not a valid Windows image. Please check this against your installation diskette."
If someone has previous experience with this, please share it with me.
Thanks in advance!
---
Note: Because of the 500k "global space left" on this board, I couldn't attach the compressed/uncompressed file here. The files can be found here (http://badu.uv.ro/)!
After that, I've dumped the DLL using the OllyDumper plugin and modified the entry point according to what I've previously found.
The problem is that, even I'm able to see all the imports, exports and resource sections correctly with various tools (e.g. lordPe, importRec, peEditor) - I'm not being able to load the DLL in any application. I keep receiveing the following error:
"The application or DLL excel.uncompressed.dll is not a valid Windows image. Please check this against your installation diskette."
If someone has previous experience with this, please share it with me.
Thanks in advance!
---
Note: Because of the 500k "global space left" on this board, I couldn't attach the compressed/uncompressed file here. The files can be found here (http://badu.uv.ro/)!