January 21, 201213 yr A solution can be setting the code memory region to ALL_ACCESS with ODBG, worked for some targets when using ImpREC..Greetings
May 17, 20169 yr Hello, I tried several import reconstructs and everytime a few function are missing (and the exe never works). win 7 64 bytes. Any advice? Edited May 17, 20169 yr by Ulysse3131
May 17, 20169 yr Disassemble the address of the import that you miss and/or debug it to find which api is. Then fix it manually.
June 6, 20169 yr Most probably your packer copied some of the bytes of the API and runs those in another section. Check with x64dbg to see which API it is...
Create an account or sign in to comment