![]() |
|
|
|
#1
|
|||
|
|||
|
the discussion was very great but I don't know what is IAT
.and thank you for that link to W32Dasm PE information. |
|
#2
|
|||
|
|||
|
I finally managed to rebuild the import table and get rid of all the protection's code. I was able to do it by manually building an IAT from the relative calls and replacing them with normal "FF 15" calls. I also resolved the 18 emulated functions. Thank you again to everybody who helped me here.
The strange thing is now that I have one real and one emulated "SetLastError" API call. Does anybody know if there is an alternative name for this API? I had two more double entries, but it turned out that the same function was exported under two different names. Now it's only optimizing the PE structure and playing hide and seek with the programmers so that I don't die after 10 seconds in the game while everything else works fine.
|
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Add imports to DLL import table | jonwil | General Discussion | 5 | 09-07-2020 16:47 |
| How to shuffle names in the PE import table? | Newbie_Cracker | General Discussion | 5 | 08-25-2019 03:59 |
| Reliable PE Library or DLL for Adding Functions to Import Table | omidgl | General Discussion | 3 | 06-28-2008 09:53 |
| Can`t restore import table | thechatter | General Discussion | 9 | 11-14-2003 21:01 |
| Changing Import Table?? | magic | General Discussion | 3 | 09-14-2003 01:59 |