![]() |
|
#10
|
|||
|
|||
|
every plugin maps and resolves the exports imports whtever it is called
so stripping the export table doesnt have any problem just have the original exe in the directory actully if i remember well just view executable and modify (zeroing out) the export table entry in peheader defeats that checks as i think (it was just relying on the expecting a export table header) actually i was coding to incorporate this export table elimination in runtime on the PLUGIN NTGLOBALFLAG (see there is a big thread in this forum second or third topmost read ever since the beginning of the board quiet a honour i would say called using tls in olly) but i saw reports that crudds re-pair already eliminates export -table and also some such methods were already discussed by shub-nigurrath and i suck coding c which is what i coded the plugin in so its still sleeping in some shells around the worldalso this outputdebugstring if you see also has a big thread here (yeah i have a small percentage of contribution to that thread too which goggles modified and crudd incorporated in his re-pair) |
| Thread Tools | |
| Display Modes | |
|
|