Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-30-2004, 23:50
evaluator
 
Posts: n/a
mostly i think, aspr-stripper not resolves imports but grabs them from aspr;
so all is ok;


>OriginalFirstThunk
?? you are messing something..
Reply With Quote
  #2  
Old 05-01-2004, 00:14
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
OriginalFirstThunk
i think it should fix the problem?

maybe i should read some tutorials for Import Table... do you know a good one?
PS: i found some description how to fix for every OS in safedisc... it's a very long article, but maybe it helps
Reply With Quote
  #3  
Old 05-01-2004, 00:16
Jay Jay is offline
VIP
 
Join Date: Feb 2002
Posts: 249
Rept. Given: 31
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 15
Thanks Rcvd at 13 Times in 5 Posts
Jay Reputation: 3
MaRKuS-DJM

If I remember correctly Lunar_Dust released a First_Thunk_Rebuilder, never had occasion to use it so I don't know if will help you with your problem, may be worth checking out.
Reply With Quote
  #4  
Old 05-01-2004, 01:04
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
Quote:
Originally Posted by Jay
If I remember correctly Lunar_Dust released a First_Thunk_Rebuilder, never had occasion to use it so I don't know if will help you with your problem, may be worth checking out.
i think it's worth a try thanks you!

EDIT: i see this tool does exactly the same as the option in imprec "Rebuild Original FT"
i wasn't able to test it if it works (till now)

PS: does it make sense to import by ordinal?

Last edited by MaRKuS-DJM; 05-01-2004 at 01:13.
Reply With Quote
  #5  
Old 05-01-2004, 01:25
britedream britedream is offline
Friend
 
Join Date: Jun 2002
Posts: 436
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
britedream Reputation: 0
Hi
400000+3c---> offset to pe signature, add to whatever there 80H, then there is an RVA to IMPORTDirectory.

regards.

Last edited by britedream; 05-01-2004 at 09:22.
Reply With Quote
  #6  
Old 05-04-2004, 23:31
evaluator
 
Posts: n/a
Markus, that unpacked PEC on ftp are your?
Reply With Quote
  #7  
Old 05-04-2004, 23:52
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
Quote:
Originally Posted by evaluator
Markus, that unpacked PEC on ftp are your?
unpacked PEC is not mine... i didn't upload anything to ftp. and the PEC i released is inline-patched

Quote:
Originally Posted by britedream
Hi
400000+3c---> offset to pe signature, add to whatever there 80H, then there is an RVA to IMPORTDirectory.

regards.
britedream, what can i do there? i think LordPE point me to the same... but can i fix there something?
Reply With Quote
  #8  
Old 05-05-2004, 19:06
evaluator
 
Posts: n/a
i had dld Pec2 & is sux to run on W98!
while on XP it runs well. What a shame, eh!?
Reply With Quote
  #9  
Old 05-05-2004, 21:43
evaluator
 
Posts: n/a
well, redownloaded 04may release, now works on w9x.
Reply With Quote
  #10  
Old 07-16-2004, 23:20
Shub-Nigurrath's Avatar
Shub-Nigurrath Shub-Nigurrath is offline
VIP
 
Join Date: Mar 2004
Location: Obscure Kadath
Posts: 978
Rept. Given: 70
Rept. Rcvd 431 Times in 101 Posts
Thanks Given: 85
Thanks Rcvd at 411 Times in 130 Posts
Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499
guys, look here, there's everything ..in english

_http://www.codebreakers-journal.com/viewarticle.php?id=18&layout=abstract
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪)
There are only 10 types of people in the world: Those who understand binary, and those who don't
http://www.accessroot.com
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Help to fixing API-Calls Nukacola General Discussion 6 05-11-2005 16:49
Import Rebuilding Without Import Table Kerlingen General Discussion 11 01-13-2005 10:24
Fixing an EXE to not call a DLL? Barry General Discussion 11 06-03-2004 00:37
Problem with fixing IAT K3nny General Discussion 5 01-04-2004 19:26


All times are GMT +8. The time now is 20:48.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )