|
|
|
|
#1
07-07-2008, 22:34
|
|||
|
|||
|
No, not IAT, it is IDT: Import Directory Table. ImpREC GUI/document make user confusing about them. The IAT in dump file is always the IAT in the fixed files. ImpREC will only fix the IDT + name table + original table...
I alway use PEView to view the IAT/IDT struct before and after dumping PE file. The option of ImpREC change the way of IAT/IDT in the fixed file. Last edited by TQN; 07-07-2008 at 22:41. 
|
|
#2
07-07-2008, 22:53
|
|||
|
|||
|
So in my case it has done something wrong....
In my test,it made a 2nd IAT in exchange of using current one. Regards
__________________
I should look out my posts,or JMI gets mad on me! 
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| ImpRec bug ?!! | Newbie_Cracker | General Discussion | 2 | 11-14-2006 21:06 |
| Problems with Imprec 1.6f > | ILCH | General Discussion | 6 | 11-18-2004 09:16 |
| ImpREC.dll & reversing | FEUERRADER | General Discussion | 0 | 02-17-2004 22:41 |
| imprec question | fotisl | General Discussion | 1 | 09-20-2002 06:09 |
Hybrid Mode
