PDA

View Full Version : Unpacking Asprotect


Nitrus
September 27th, 2001, 12:27
Welp using tsehp's new tools i decided to take a crack at my first ASPROTECT app. My target "IgooFTP". I had found the original entry point which was at (0047F732) and managed a successful dump of the image. The only thing that seems to be giving me trouble is the damn import table. I do believe i had found it at (0048A110) with a length of EF6, but i could be wrong. Any way I tried pasting it together and stuff, dump fixed all the sections, changed the directories, and the bugger still didn't work. Could someone be o-so kind enough to give this app a go and tell me if i have the whole import table? Thanks in advance, Nitrus.

PS. If you would like to help or you wish to see my dumped exe, email me @ fruityjunkie@hotmail.com.

+SplAj
September 28th, 2001, 06:19
Yes the OEiP is correct and the IAT starts at 0x8A000 see attached resolved.txt....

Needs a tidy up at the end , .NewSec at offset 0x174000 for IAT/IT

Kilby where R U .............


+Spl/\j

Kilby
September 29th, 2001, 07:32
Where am I, working as usual

Fighting with another packer, and wishing I had not been such a cabbage with iglooftp that evening (Hust call me Homer).

Anyway, on with work and my hunt for tasm again, due to losing my HD

Kilby...