Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   PECompact unpack (https://forum.exetools.com/showthread.php?t=8471)

Asus 11-12-2005 11:14

PECompact unpack
 
Hi,

We have an application was packed with PECompact 2.x, I also used QuickUnpack 0.7 to unpack that file and target has been successfully unpacked. When I test unpacked, I got a box with msg is The application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

What did I wrong? Any suggestions?

James 11-12-2005 13:47

Manual unpack it in OLLYDBG. Please post your target info if you don't mind.
Quote:

http://www.tuts4you.com/tutorials/Unpacking/PeCompact%202.xx%20(Unpacking%20&%20Inline%20Patching)/PECompact2.xx-Finding-The-OEP-%26-Inline-Patching.htm

winndy 11-12-2005 15:31

Quote:

Originally Posted by James
Manual unpack it in OLLYDBG. Please post your target info if you don't mind.

But we cannot vist www.tuts4you.com.
Same with the ARTeam homepage:
hxxp://cracking.accessroot.com/.

But We can vist ARTeam forum:
http://intechhosting.com/~access/forums/index.php?act=idx


It 's the problem dealing with domain?

Regards

James 11-12-2005 17:00

Search for a working proxy...or visit here for PECompact 2.x Analysis & PECompact 2.xx OEP finder (OllyScript).
Quote:

http://www.openrce.org/reference_library/packer_database_view/12

Peter[Pan] 11-12-2005 18:10

Also Check the first section's attributes, they need to be E* insted of 6* which sometimes happens, also check that if the app has a tls table, that it isnt pointing to invalid entires etc, i found this when unpacking some apps from pgware which are pecompact, most of the time the entire tls table can be erased.


All times are GMT +8. The time now is 12:36.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX