unlinker IDA - an IDA plugin for extracting functions from a PE file for later reuse

		Exetools > General > Community Tools
unlinker IDA - an IDA plugin for extracting functions from a PE file for later reuse

Thread Tools

Display Modes

03-22-2021, 03:00

jonwil

VIP

Join Date: Feb 2004

Posts: 399

Rept. Given: 2

Rept. Rcvd 21 Times in 9 Posts

Thanks Given: 2

Thanks Rcvd at 67 Times in 35 Posts

Thanks, that's great, I have added those.
Looks like the only remaining unknown is Unknown3 = 0x10000,
It also looks like the c2.dll from Visual C++ 2019 latest version forces 0x80010090 as the base value for @feat.00 (so KernelAware | Unknown3 | C_CppModule | Report_Dev11)

More features comming soon.

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
unlinker - a program for extracting functions from a PE file for later reuse	jonwil	Community Tools	5	11-25-2016 08:24
Extracting file from MSI package	new_profile	General Discussion	20	12-09-2013 15:06

All times are GMT +8. The time now is 00:57.