Results 1 to 6 of 6

Thread: Bad address references in a dumped encrypted dll

  1. #1
    theraptureback
    Guest

    Bad address references in a dumped encrypted dll

    Hi all.
    i'm trying to reverse a PACE INTERLOK protected dll.
    When i dump it (with procdump) the offset of import fuctions seems corrupted

    original code:
    call [GobalAlloc]
    dump code:
    call [bb3ee100]

    and maybe the global vars too...

    I try rebuilt the IT with ImportREC but no luck.

    any1 can say me whats is the problem and how i can resolve it

    very thnx and nice to meet all

    the^rapture
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    Rebuilding the IAT of a dumped exe/dll is often a little more work than just a single click in one of those auto-rebuilding programs. You will find lots of info about it by searching this board anyway.

  3. #3
    prejker
    Guest
    u prolly have bad relocations. use mact's awesome ReLoX to fix them, its on his site
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Liquid
    Guest
    Quote Originally Posted by prejker
    u prolly have bad relocations. use mact's awesome ReLoX to fix them, its on his site
    Jeeeez, prejker. So you're still alive ;-)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    prejker
    Guest
    Quote Originally Posted by Liquid
    Jeeeez, prejker. So you're still alive ;-)
    yea... alive and kickin'
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    Jeeeez, prejker. So you're still alive ;-)
    It is nice to see you active again

    Woodmann

Similar Threads

  1. Changing the address a dll references
    By Steve110 in forum OllyDbg Support Forums
    Replies: 4
    Last Post: June 19th, 2012, 17:46
  2. encrypted harddisk
    By OHPen in forum RCE Cryptographics
    Replies: 13
    Last Post: January 29th, 2009, 12:55
  3. old encrypted cd
    By kqt in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: June 4th, 2002, 01:24
  4. encrypted .exe?
    By spamal in forum Malware Analysis and Unpacking Forum
    Replies: 8
    Last Post: January 4th, 2001, 15:48

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •