View Single Post
  #6  
Old 12-20-2002, 17:49
xxxxx
 
Posts: n/a
well it actually work.

1. Find OEP
2. Execute till OEP (OLLY - mem breakpoint to access on OEP)
3. PEDump - put all flags(rebuild options part), select REBUILD NEW IMPORT TABLE
4. PEDump - REBUILD PE (Check if you can load it in Olly debugger)
5. IMPREC - Find all api-s
6. IMPREC - Make fix dump
7. Eventually - Fix OEP in PE header if imprec didn't do already
8. Eventually - check on win 98 if all dll functions are exported

I try and success.
Reply With Quote