Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-09-2025, 19:13
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 661 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,822 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
RelocationRebuild

RelocationRebuild:
build relocations for a PE file

First step is selecting dumped exe/dll in "File Name"
then we you have two options:
1. Dasm Search button - not always working
2. Search button
this also tries to compare it if selected Process/Module is chosen
you could also leave Process/Module empty and proceed with Search button
and compare afterwards the resulted list and remove wrong elements by pressing:
A. Check process button - this uses the Process/Module chosen
B. Compare with file - select a file
The process or filename should have other ImageBase then the one from "File Name".

The final step is "Append to PE" to finally build relocations.
Attached Files
File Type: zip RelocationRebuild.zip (165.3 KB, 35 views)
Reply With Quote
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post:
Apuromafo (07-10-2025), Fyyre (08-23-2025), user1 (12-08-2025)
The Following 13 Users Say Thank You to CodeCracker For This Useful Post:
alekine322 (07-17-2025), Apuromafo (07-10-2025), dnvthv (12-08-2025), Fyyre (08-23-2025), MarcElBichon (07-10-2025), SofTw0rm (08-25-2025), tonyweb (07-11-2025), uranus64 (07-09-2025), user1 (12-08-2025), user_hidden (07-09-2025), wilson bibe (07-10-2025), zeuscane (07-09-2025)
  #2  
Old 12-08-2025, 05:15
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 661 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,822 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
RelocationRebuild64

RelocationRebuild64:
- this is one is for 64 bits;
- Disabled "Dasm Search" as I can't found a 64 bits dissasembler; true however that "Dasm Search" doesn't produce good results in some cases;

Source code Visual Studio Community 2017 included.
If you find any bug let me know.
Attached Files
File Type: rar RelocationRebuild64.rar (1.71 MB, 30 views)
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
user1 (12-08-2025)
The Following 6 Users Say Thank You to CodeCracker For This Useful Post:
alekine322 (12-20-2025), dnvthv (12-08-2025), niculaita (12-09-2025), tonyweb (01-25-2026), uranus64 (12-09-2025), user1 (12-08-2025)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 04:16.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )