I am trying to unpack a DLL and fix the import tables with ImpRec. However, I am stuck with this error. Following is what I have tried.
- Modified the flag in its PE header so that windows loads the file as an exe, not a dll.
- Loaded to Immunity Debugger and found the real entry point(Entry point of unpacked binary)
- Dumped the the binary at this entry point.
- Now I opened ImpREC to fix the import table of the of the dumped DLL. However, in ImpREC the base memory displayed is 7100000. When I give "068BA2A0" as entry point, ImpRec complaints invalid OEP!. I dont understand how the base address of the debugged process is "7100000". I suspect this could be the problem.
Why is this error? Any pointers to fix it?