#1
|
||||
|
||||
Help me to fixing API-Calls
hi,
i'm trying to fix some calls to api's which are made through a "Call api-address". No problem so far replace address with the address of the api. Ok but this isn't working on other OS then mine. So my question is it possible to fix these calls like call dword ptr:[IAT_address] without increasing in size. Cos for calls like call dword ptr:[IAT_address] i must only change the iat_address to the right api-call. I tried everything with my poor asm maybe a advice from a guru?? I thought about a loader checking the OS and replace the calls but that's alot of work. I also tried replace call api-address with a jmp to free space where i assembled a Call dword ptr:[iat-address] and a jmp back, but this isn't working. Greetings Nukacola Last edited by Nukacola; 04-28-2005 at 02:34. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
VB calls | obfuscator | General Discussion | 7 | 06-04-2014 13:46 |
How do you find all modular calls with Olly? | Fade | General Discussion | 2 | 04-09-2007 06:06 |
Ida 4.6 calls back home??? | loman | General Discussion | 3 | 09-22-2004 03:29 |
Fixing an EXE to not call a DLL? | Barry | General Discussion | 11 | 06-03-2004 00:37 |
Problem with fixing IAT | K3nny | General Discussion | 5 | 01-04-2004 19:26 |