View Single Post
  #1  
Old 07-31-2006, 15:59
5Alive 5Alive is offline
Friend
 
Join Date: Aug 2003
Posts: 82
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 1 Time in 1 Post
5Alive Reputation: 0
Merging Imports with Exports?

I have a DLL file I wish to unpack, I have a working unpacked file "found in the wild" which I am using for comparison.

I dumped a DLL at OEP using LordPE and correctly restored the imports with ImpREC. I then wiped the packers section header to leave the the usual sections:

.text, .rdata, .data, .reloc, .rsrc.

Of course the restored imports are in the section .mackt, what I'd like to know is how do I merge/join the .mackt section with the .rdata section?

I haven't seen any mention of this in any of the RCE forums or tutorials.

Thanks,
5aLIVe.
Reply With Quote