mrexodia Posted January 21, 2012 Posted January 21, 2012 A solution can be setting the code memory region to ALL_ACCESS with ODBG, worked for some targets when using ImpREC..Greetings
Ulysse3131 Posted May 17, 2016 Posted May 17, 2016 (edited) Hello, I tried several import reconstructs and everytime a few function are missing (and the exe never works). win 7 64 bytes. Any advice? Edited May 17, 2016 by Ulysse3131
crystalboy Posted May 17, 2016 Posted May 17, 2016 Disassemble the address of the import that you miss and/or debug it to find which api is. Then fix it manually. 1
mrexodia Posted June 6, 2016 Posted June 6, 2016 Most probably your packer copied some of the bytes of the API and runs those in another section. Check with x64dbg to see which API it is...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now