mrexodia Posted January 21, 2012 Share Posted January 21, 2012 A solution can be setting the code memory region to ALL_ACCESS with ODBG, worked for some targets when using ImpREC..Greetings Link to comment
Ulysse3131 Posted May 17, 2016 Share Posted May 17, 2016 (edited) Hello, I tried several import reconstructs and everytime a few function are missing (and the exe never works). win 7 64 bytes. Any advice? Edited May 17, 2016 by Ulysse3131 Link to comment
crystalboy Posted May 17, 2016 Share Posted May 17, 2016 Disassemble the address of the import that you miss and/or debug it to find which api is. Then fix it manually. 1 Link to comment
mrexodia Posted June 6, 2016 Share Posted June 6, 2016 Most probably your packer copied some of the bytes of the API and runs those in another section. Check with x64dbg to see which API it is... Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now