![]() |
|
#13
|
|||
|
|||
|
I think the OEP is right becuase I tried the same method on a crackme(PEcompact 1.84) and two other targets(exe) after Unpack+IAT rebuild(Imprec) all are working fine
. But with dll no sucess getting IAT.Also with "XP notepad" i packed with pecompact imprec wont work. I have a few doubts: In Unpacked(original) notepad/exe/dll entry point in PE header(PEP) is OEP, Is it Correct? Is OEP hard coded(present in the file on disk) in PECompacted file? I tried getting IAT info in Imprec for Notepad98 it gives values but for notepad XP says : "Could Not Find anything good at this OEP". I tried changing max recursion & buffer size in options but no use. I think i have to find IAT manually and fix it. I am sending U the target while I try confirming the OEP myself because that would give me real confidence. Last edited by drasd_20002; 05-02-2003 at 01:58. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Inline Patching | MaRKuS-DJM | General Discussion | 1 | 01-24-2004 23:03 |
| Inline patching for armadillo | annibal | General Discussion | 1 | 09-04-2003 14:24 |