jsteed
March 6th, 2002, 21:07
tsehp,
I tried using rv 1.3 to rebuild the IT for Table.exe from w*w.chemtable.com. OEP 57F7D4, RVA 19649C, Length AE4. Yes, they are the same guys that make RegOrganizer. I found that the first thunk overwrites the first few bytes of the names. This problem does not occur with rv12b9. I've attached the bin files from both versions. This problem does not show up when rebuilding RegOrganizer. The problem may be that kernel32 is divided into several pieces in the IT. That is not the case with RegOrganizer. The other possibility may be that this IT is quite large. In any case, great tool!
JSteed
I tried using rv 1.3 to rebuild the IT for Table.exe from w*w.chemtable.com. OEP 57F7D4, RVA 19649C, Length AE4. Yes, they are the same guys that make RegOrganizer. I found that the first thunk overwrites the first few bytes of the names. This problem does not occur with rv12b9. I've attached the bin files from both versions. This problem does not show up when rebuilding RegOrganizer. The problem may be that kernel32 is divided into several pieces in the IT. That is not the case with RegOrganizer. The other possibility may be that this IT is quite large. In any case, great tool!
JSteed