eGospodarka.pl
eGospodarka.pl poleca

eGospodarka.plGrupypl.comp.programmingcode for flushing imports to .idata in exe › code for flushing imports to .idata in exe
  • X-Received: by 10.31.48.138 with SMTP id w132mr91011vkw.23.1503148964970; Sat, 19 Aug
    2017 06:22:44 -0700 (PDT)
    X-Received: by 10.31.48.138 with SMTP id w132mr91011vkw.23.1503148964970; Sat, 19 Aug
    2017 06:22:44 -0700 (PDT)
    Path: news-archive.icm.edu.pl!news.icm.edu.pl!news.nask.pl!news.nask.org.pl!goblin2!g
    oblin.stu.neva.ru!peer02.am4!peer.am4.highwinds-media.com!peer02.iad!feed-me.hi
    ghwinds-media.com!news.highwinds-media.com!border1.nntp.dca1.giganews.com!borde
    r2.nntp.dca1.giganews.com!nntp.giganews.com!m81no1131007itb.0!news-out.google.c
    om!n39ni15055qtf.1!nntp.google.com!i19no1101378qte.1!postnews.google.com!glegro
    upsg2000goo.googlegroups.com!not-for-mail
    Newsgroups: pl.comp.programming
    Date: Sat, 19 Aug 2017 06:22:44 -0700 (PDT)
    Complaints-To: g...@g...com
    Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=5.172.255.129;
    posting-account=Sb6m8goAAABbWsBL7gouk3bfLsuxwMgN
    NNTP-Posting-Host: 5.172.255.129
    User-Agent: G2/1.0
    MIME-Version: 1.0
    Message-ID: <2...@g...com>
    Subject: code for flushing imports to .idata in exe
    From: fir <p...@g...com>
    Injection-Date: Sat, 19 Aug 2017 13:22:45 +0000
    Content-Type: text/plain; charset="UTF-8"
    Lines: 28
    X-Received-Body-CRC: 326306093
    X-Received-Bytes: 2138
    Xref: news-archive.icm.edu.pl pl.comp.programming:211191
    [ ukryj nagłówki ]

    I think i need some code that would work like
    that

    AddImportsForModule("KERNEL32.DLL", "ExitProcess", "GetModuleHandleA",
    "GetProcAddress");

    AddImportsForModule("msvcrt.dll", "fopen", "free", "printf", "exit", "fclose",
    "fread");



    well maybe it would be more like

    char* import_names[] = {"fopen", "free", "printf", "exit", "fclose", "fread");

    AddImportsForModule("msvcrt.dll", import_names);

    but this is detail

    the code just need to build binary block of .idata section that i can flush to exe
    file
    when flushing exe to disk in my assembler

    im howewer a bit confused how weirdly this .idata binary is build, so maybe some
    hints on that?

    btw some best info i found on this topic is here

    https://github.com/macton/x64-fasm-examples/blob/mas
    ter/Windows/00_BasicOS/00_pe_return_03.asm

    or around here, so if someone would like to focus on this and give me some hints may
    use it

    tnx

Podziel się

Poleć ten post znajomemu poleć

Wydrukuj ten post drukuj


Następne wpisy z tego wątku

Najnowsze wątki z tej grupy


Najnowsze wątki

Szukaj w grupach

Eksperci egospodarka.pl

1 1 1

Wpisz nazwę miasta, dla którego chcesz znaleźć jednostkę ZUS.

Wzory dokumentów

Bezpłatne wzory dokumentów i formularzy.
Wyszukaj i pobierz za darmo: