Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-12-2005, 17:13
oVERfLOW oVERfLOW is offline
Family
 
Join Date: Jan 2005
Location: Tehran
Posts: 117
Rept. Given: 127
Rept. Rcvd 42 Times in 19 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
oVERfLOW Reputation: 42
Question Question

the discussion was very great but I don't know what is IAT .

and thank you for that link to W32Dasm PE information.
Reply With Quote
  #2  
Old 01-13-2005, 10:24
Kerlingen
 
Posts: n/a
I finally managed to rebuild the import table and get rid of all the protection's code. I was able to do it by manually building an IAT from the relative calls and replacing them with normal "FF 15" calls. I also resolved the 18 emulated functions. Thank you again to everybody who helped me here.

The strange thing is now that I have one real and one emulated "SetLastError" API call. Does anybody know if there is an alternative name for this API? I had two more double entries, but it turned out that the same function was exported under two different names.

Now it's only optimizing the PE structure and playing hide and seek with the programmers so that I don't die after 10 seconds in the game while everything else works fine.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Add imports to DLL import table jonwil General Discussion 5 09-07-2020 16:47
How to shuffle names in the PE import table? Newbie_Cracker General Discussion 5 08-25-2019 03:59
Reliable PE Library or DLL for Adding Functions to Import Table omidgl General Discussion 3 06-28-2008 09:53
Can`t restore import table thechatter General Discussion 9 11-14-2003 21:01
Changing Import Table?? magic General Discussion 3 09-14-2003 01:59


All times are GMT +8. The time now is 18:26.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )