View Full Version : add ordinal to export table
AmAdEuS
September 20th, 2004, 19:22
i'm adapting a crack to a new version of a program, but there needed to add 2 new ordinals...
i've already created a new segment in the file with the code from functions...
now how do i add them to the export table?
dELTA
September 21st, 2004, 07:53
I assume you mean import table?
You can use IID King for example:
http://www.woodmann.com/forum/showthread.php?t=6347
SL0rd
September 21st, 2004, 15:22
I have an idea here but first I would like to say that you dont work with "segments", unless you have a win3.1 app for example. 32 bit Windows
work with "sections" in the PE file format!
Ok, the idea is, dont worry about creating new sections and making all the stuff related with IAT, just substitute your ordinals in place of some "useless"
function that is listed in the IT, if the dll that exports your ordinals is already listed in the IT. if no I think you will really do a few more work!
Ok, any corrections will be welcome!
AmAdEuS
September 21st, 2004, 15:34
no that's the point i mean the EXPORT table...
see there'S a securom 5.x protected game...
and i have a workin crack for the old version..
but in the new version the exe has 2 new exported functions that are laodd by some dll from the game....
so i added a new section to the cracked PE that contains the code of these functions which i took from the new versions's original exe.
now i need to make this old cracked exe export the 2 new functions to the game....
i but i know how the export table is built, but when i look @ the code i can't see these structures in there... my new idea is to write a complete new EAT and change the pointer in the header to my new EAT... any comments that could save me useless work? any error in this thought?
AmAdEuS
September 21st, 2004, 15:54
or is there an tool that could convert the ida-pro output to some masm32 compatible code that can be recompiled? didn't found one... but if there was i could easily modify the stuff
AmAdEuS
September 21st, 2004, 17:42
finally foud it, the name of this great tool is Lord PE Deluxe
http://mitglied.lycos.de/yoda2k/LordPE/info.htm
and my crack is working

Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.