There should be no need to if you ensure the exe can be loaded at its preferred imagebase by using a different imagebase for the loader.
You're right; this could work.
Here's my complete project:
http://rapidshare.com/files/28960507...txtrtool01.zip
Yeah. Except another module comes in the way, then one might need to rebase that one.
http://sandsprite.com/CodeStuff/Usin..._as_a_dll.html
How do you treat the missing exports table problem?
Did you reconstruct it for FX or use hardcoded offsets?
Edit: Never mind, just found your tutorial about KeeperFX![]()
Last edited by Trass3r; October 7th, 2009 at 00:41.
Nice.
The program that rebuilds export table is here, at bottom of the page:
http://keeper.lubie.org/html/dk_keeperfx.php
I'm thinking about a tool that could automate more of the exe-2-dll conversion; but I'm quite busy recently... we'll see.
Yeah already seen that, pretty cool.
Don't have much time either, gotta code for my bachelor's thesis.
EDIT:
Small sidenote, just found an interesting plugin that enables collaborative work on a binary, maybe it's helpful for you sometime
http://www.idabook.com/collabreate/index.html
EDIT2:
You mean an IDA database? Could I see it?
Last edited by Trass3r; October 9th, 2009 at 06:23.
Ok, will upload it soon.
EDIT:
It's now here:
http://keeper.lubie.org/html/dk_keeperfx_devel.php
Last edited by mefistotelis; October 18th, 2009 at 22:10.
In hex-rays 1.1, there's a support for floating point numbers. This would be very helpful in reverse-engineering the code.
Hey it's only 2000$ away![]()