search

ergrelet / unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
GNU General Public License v3.0
1.02k stars 188 forks source link

WARNING - A resolved API wasn't an export, it's been replaced with 'kernel32.ExitProcess'. #125

Open nt10086 opened 3 months ago

nt10086 commented 3 months ago

INFO - Detected packer version: 3.x frida-agent: Setting up OEP tracing for "a.dll" frida-agent: Target module has been loaded (thread #9848) ... frida-agent: Exception handler registered frida-agent: OEP found (thread #9848): 0x7ff8c57aa99c INFO - OEP reached: OEP=0x7ff8c57aa99c BASE=0x7ff8c57a0000 DOTNET=False INFO - Looking for the IAT... INFO - Performing linear scan in data sections... INFO - IAT found: 0x7ff8c57cd000-0x7ff8c57e0388 INFO - Resolving imports ... WARNING - A resolved API wasn't an export, it's been replaced with 'kernel32.ExitProcess'. INFO - Imports resolved: 109 INFO - Fixed IAT at 0x7ff8c57cd000, size=0x371 INFO - Dumping PE with OEP=0x7ff8c57aa99c ... INFO - Fixing dump ... INFO - Rebuilding PE ...

imeftun commented 2 months ago

+1 Any solution?

martinjechkov commented 1 month ago

+1

robertsi commented 2 weeks ago

+1