|
#1
|
||||
|
||||
FThunk RVA Import Problem Need Help
I am having FThunk rva import problem in delphi which is using UPX Packer...
at first upx -d doesn't work... the unpacked binary doesn't run https://i.imgur.com/kwWV5oT.png in x64dbg i am having This FThunk rva import table problem https://i.imgur.com/hGtaReT.png Program Link: https://mega.nz/#!9pAnXIAT!7S8hOV1sJ8wvwxHj6vUQs10QKzZv9wVRHhAbGeYKScE |
The Following User Says Thank You to Mendax47 For This Useful Post: | ||
Indigo (07-19-2019) |
#2
|
||||
|
||||
1. upx -d works perfectly. If your exe doesnt run after, it's because of an integrity check. Debug it.
2. your OEP is right, but I dont know how you arrive at those IAT numbers. Using the same scylla version as you, scylla correctly finds the entire IAT with VA:004AE5C0 and Size:0000042C. 3. Hint: For the integrity check, look around 0x00489BC6. Once the integrity check is patched, the unpacked file works. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
import ida_bytes problem | eychei | General Discussion | 8 | 04-12-2018 02:27 |
Unpack OneWay.dll problem,Import REConstructor v1.6 Final fails. | winndy | General Discussion | 3 | 01-07-2006 10:22 |
Import Rebuilding Without Import Table | Kerlingen | General Discussion | 11 | 01-13-2005 10:24 |