![]() |
RelocationRebuild
1 Attachment(s)
RelocationRebuild:
build relocations for a PE file First step is selecting dumped exe/dll in "File Name" then we you have two options: 1. Dasm Search button - not always working 2. Search button this also tries to compare it if selected Process/Module is chosen you could also leave Process/Module empty and proceed with Search button and compare afterwards the resulted list and remove wrong elements by pressing: A. Check process button - this uses the Process/Module chosen B. Compare with file - select a file The process or filename should have other ImageBase then the one from "File Name". The final step is "Append to PE" to finally build relocations. |
RelocationRebuild64
1 Attachment(s)
RelocationRebuild64:
- this is one is for 64 bits; - Disabled "Dasm Search" as I can't found a 64 bits dissasembler; true however that "Dasm Search" doesn't produce good results in some cases; Source code Visual Studio Community 2017 included. If you find any bug let me know. |
| All times are GMT +8. The time now is 12:21. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX