![]() |
|
#8
|
|||
|
|||
|
You may use ImportReconstructor to rebuild import table, but some packers
like asprotect take some api's like GetCurrentThread - and move those value to theirs memory - that inport reconstructor can't find any api on current offset, other api is GetCommandLineA - those apis you must rebuild manually - put only the corrent offet in imprect
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Add imports to DLL import table | jonwil | General Discussion | 5 | 09-07-2020 16:47 |
| How to shuffle names in the PE import table? | Newbie_Cracker | General Discussion | 5 | 08-25-2019 03:59 |
| Reliable PE Library or DLL for Adding Functions to Import Table | omidgl | General Discussion | 3 | 06-28-2008 09:53 |
| Can`t restore import table | thechatter | General Discussion | 9 | 11-14-2003 21:01 |
| Changing Import Table?? | magic | General Discussion | 3 | 09-14-2003 01:59 |