376408384 Posted October 7, 2012 Posted October 7, 2012 I use UIF to move IAT Base Address and Sort IATs in New (other) Address After then Use Scylla Imports Reconstruction to fix dump file failed why?
LCF-AT Posted October 7, 2012 Posted October 7, 2012 Hi,1. Did you redirect the IAT into main target or memory section?If you has RD the IAT into a mem section then you need to dump this section and add it on your dump and then try to fix it.2. If your IAT is in the main target and you get this message on your picture then disable us PE Header from disk and try again.Just check the PE data at EP and then later at OEP again [also the target section could be changed].greetz
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now