Results 1 to 3 of 3

Thread: Fix imports in a dll?

  1. #1
    ukguy99
    Guest

    Exclamation Fix imports in a dll?

    Hey guys

    So ive ripped the dll in olly from memory from a non commercial app that downloads the dll into memory.

    But now i need to fix the imports on the dll so that the dll functions properly... does anyone have any clue how to do this?

    I can send you a copy of the dll if needed,any help would be much appreciated.

    Thanks for your time.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

  3. #3
    He says it's downloaded in memory and I assume that it's also remaped in memory so imprec won't help as it works only with existing images. Dirty hack to force imprec to use it would be to make extra LDR_DATA_TABLE_ENTRY which would describe this dll, and which imprec can see. Other way, which I would suggest is using custom import rebuild library, and one example you may find in http://deroko.phearless.org/GenericUnpacker.rar where for scanning imports you would specify start/end of this dll and let library to do the task for you, however you will need to extract usable code on your own (and I can help you with this) and write own tool to fix dump.

Similar Threads

  1. Help with a codecave, imports
    By abitofboth in forum The Newbie Forum
    Replies: 15
    Last Post: March 26th, 2009, 17:19
  2. PEiD imports parsing DoS
    By _g_ in forum Blogs Forum
    Replies: 6
    Last Post: August 25th, 2008, 13:20
  3. imports are easy to fix
    By deroko in forum Blogs Forum
    Replies: 5
    Last Post: October 24th, 2007, 10:22
  4. MASM and MSVBVM60 imports
    By Fahr in forum Off Topic
    Replies: 25
    Last Post: April 29th, 2004, 13:46
  5. problem fixing imports
    By jolopez in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: February 17th, 2004, 09:23

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •