Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #6  
Old 02-02-2004, 04:04
Barry Barry is offline
Friend
 
Join Date: Dec 2003
Posts: 84
Rept. Given: 10
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Barry Reputation: 2
Hi least,

Yes, I can dump/rebuild the prog so it works in the OS I dumped under (but only by manually adding the API's). I also think the Import table is messed up as imprec can't find it once the OEP found using OllyDbg is entered.

The file has sections similar to UPX0/UPX1 but called CWFR and FWFR and where the UPX! sig usually goes is BWFR so this could be a new UPX scrambler or a UPX-a-like packer, not sure, PEiD says it's UPX?

An example EXE is here: hxxp://arcade.reflexive.com/downloadgame.aspx?AID=79&CID=0

Install it and check fusion.exe

You maybe able to see where the import table is hidden?

thanks!
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Write Access on Win9x nikola General Discussion 2 04-27-2005 20:23
Unpacked Files under XP SP1 doesn't work on SP2 ivanov General Discussion 7 04-21-2005 21:51
SoftICE (DS 2.6 || SS 2.6) + ICEDump 6.025 + win9X --> Not Work fine? sky General Discussion 1 09-19-2002 09:51


All times are GMT +8. The time now is 01:20.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )