Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-23-2023, 19:15
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports

ManualImports
This programs comes with two ways of getting imports:
1. Old mode:
by selecting "Process", you can optionally set OEP RVA, then press "Autodetect"
for getting Imports VA, Imports Size
and finally pressing "Get imports" for getting imports thunks.
2. New mode
by selecting "Process" and pressing Attach button.
Only valid imports will be showed in this mode.
"Sort thunks after:" "Sections" or "Dlls" refers to only this option
"Sections" option will set as name and as parent the section from which
an import thunk belongs,
"Dlls" option will set as name and as parent the dll name

"Don't scan first (code) section" also refers to this "New mode" only.

Import - Import ImpRec/Scylla saved Tree.
"Append to PE" is the final step - fixing the dump.

In Version 3:
- Added "Imports from file" to successfully resolve imports from file not from memory of module
- Added "Resolve forwarded" to resolve forwarded imports and Api Set;
- Fixed some bugs

wondering if there is any interest for such tool, please write bug reports/suggestions.
Attached Files
File Type: rar ManualImports_v3_Src&Exes.rar (319.6 KB, 57 views)

Last edited by CodeCracker; 12-23-2023 at 23:30.
Reply With Quote
The Following 8 Users Gave Reputation+1 to CodeCracker For This Useful Post:
ahmadmansoor (12-23-2023), chessgod101 (12-23-2023), Dr.FarFar (08-18-2024), Fyyre (01-12-2024), MarcElBichon (12-23-2023), mdj (12-28-2023), papi (05-03-2024), user1 (12-25-2023)
The Following 18 Users Say Thank You to CodeCracker For This Useful Post:
ahmadmansoor (12-23-2023), alekine322 (12-26-2023), blue_devil (12-25-2023), canopus (08-30-2024), chessgod101 (12-23-2023), Dr.FarFar (08-18-2024), Fyyre (01-12-2024), mdj (12-28-2023), niculaita (04-14-2024), papi (05-03-2024), pnta (04-12-2024), retro (05-01-2024), SofTw0rm (12-24-2023), user1 (12-25-2023), user_hidden (12-23-2023), Vosiyons (12-24-2023), wilson bibe (12-24-2023), Zeokat (12-23-2023)
  #2  
Old 04-11-2024, 23:45
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
Version 4 out

In Version 4 - attached locally:
- Added "Imports from PE" in order to get import table from exe/dll and is also optionally the "Additional thunk offset" to add that offset to all thunks;
- Fixed various bugs
Attached Files
File Type: rar ManualImports_v4-Exe&Scr.rar (269.5 KB, 33 views)
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
niculaita (04-14-2024)
The Following 10 Users Say Thank You to CodeCracker For This Useful Post:
bolo2002 (04-12-2024), Dr.FarFar (08-18-2024), MarcElBichon (04-12-2024), niculaita (04-14-2024), nikkapedd (04-15-2024), pnta (04-12-2024), tonyweb (04-13-2024), uranus64 (04-12-2024), user_hidden (04-12-2024), wilson bibe (04-12-2024)
  #3  
Old 04-15-2024, 01:35
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports v5 beta:
- fixed case intensive module compare bug;
- added "Resolve Windows 8 apphelp" to resolve more Apis in Windows 8

Link download:
https://workupload.com/file/skWnNEjELWz
Reply With Quote
The Following 3 Users Say Thank You to CodeCracker For This Useful Post:
niculaita (04-15-2024), tonyweb (04-15-2024), Vosiyons (04-15-2024)
  #4  
Old 04-15-2024, 22:08
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports v6 beta:
- fixed bug if process terminated after selecting;
- added "kernelbase" checkbox to resolve "kernelbase" to "kernel32" if possible

Link download:
https://workupload.com/file/uFycC7H7urU

Last edited by CodeCracker; 04-30-2024 at 18:20.
Reply With Quote
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post:
ahmadmansoor (04-17-2024), Fyyre (04-17-2024)
The Following 10 Users Say Thank You to CodeCracker For This Useful Post:
ahmadmansoor (04-17-2024), besoeso (04-16-2024), darkBLACK (04-25-2024), Fyyre (04-17-2024), niculaita (04-17-2024), Rasmus (05-01-2024), user_hidden (04-16-2024), Vosiyons (04-16-2024), wilson bibe (04-16-2024), zeuscane (04-15-2024)
  #5  
Old 04-30-2024, 18:21
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports v7 beta:
- added module name in disasm window
- fixed various bugs in "Patch process"- resolve forwarded imports
- fixed "Define import" bug
Some bugs may be still present and this is the reason for beta.
Download
https://workupload.com/file/Rm7LQamyK3R
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
user1 (05-02-2024)
The Following 9 Users Say Thank You to CodeCracker For This Useful Post:
besoeso (04-30-2024), foosaa (05-01-2024), MarcElBichon (04-30-2024), Rasmus (05-01-2024), retro (05-01-2024), sendersu (04-30-2024), user1 (05-02-2024), Vosiyons (05-02-2024), wilson bibe (05-01-2024)
  #6  
Old 05-03-2024, 00:13
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports v7 beta fixed4:
- Fix click Import button press Cancel in Open File Dialog -> the tree got cleared
- now will update module name while jumping
- now shows "jumps to api"
- scrolling and selecting (focusing) from where the user jumped; will also keep scrolling and selected if possible.
https://workupload.com/file/Dyzs5fxKRKG
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
blue_devil (05-03-2024)
The Following 12 Users Say Thank You to CodeCracker For This Useful Post:
Apuromafo (05-03-2024), besoeso (05-03-2024), blue_devil (05-03-2024), darkBLACK (05-31-2024), MarcElBichon (05-03-2024), niculaita (05-07-2024), Rasmus (05-03-2024), rceArchivist (05-03-2024), sendersu (05-03-2024), tonyweb (05-04-2024), wilson bibe (05-03-2024), Zeokat (05-03-2024)
  #7  
Old 08-07-2024, 23:38
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 539
Rept. Given: 31
Rept. Rcvd 487 Times in 176 Posts
Thanks Given: 25
Thanks Rcvd at 2,411 Times in 426 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
ManualImports_v7_beta_fixed5

ManualImports_v7_beta_fixed5 - source code included now;
- fixed a crush while fixing imports multiple times
Attached Files
File Type: rar ManualImports_v7_beta_fixed5(src).rar (287.1 KB, 31 views)
Reply With Quote
The Following 4 Users Gave Reputation+1 to CodeCracker For This Useful Post:
Apuromafo (08-08-2024), Dr.FarFar (08-18-2024), uranus64 (08-08-2024), user1 (08-08-2024)
The Following 13 Users Say Thank You to CodeCracker For This Useful Post:
Apuromafo (08-08-2024), besoeso (08-08-2024), canopus (08-30-2024), Doit (08-09-2024), Dr.FarFar (08-18-2024), Fyyre (09-05-2024), MarcElBichon (08-08-2024), SofTw0rm (08-12-2024), uranus64 (08-08-2024), user1 (08-08-2024), Vosiyons (08-09-2024), wilson bibe (08-08-2024), wx69wx2023 (08-08-2024)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 19:40.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )