Index
> Main > PE Export Table Dump (Updata) |
| Author |
|
|
lovefasm 23 Sep 2007, 03:09
PE Export Table Dump (Updata)
|
|||||||||||
23 Sep 2007, 03:09 |
|
|
asmfan 23 Sep 2007, 11:55
To get the following result (without extension), e.g.
Quote:
I/ve made additional proc that truncates extensions. Code: fTruncExt: pFileName EQU (esp + 4) mov eax, [pFileName] pushad mov edi, eax mov esi, eax cld or ecx, -1 xor eax, eax repne scasw sub esi, edi neg esi shr esi, 1 mov ecx, esi std sub edi, 2 mov ax, '.' repne scasw cld jnz .next add edi, 2 mov WORD [edi], 0 .next: popad ret 4 the complete modified code follows
_________________ Any offers? |
|||||||||||
|
23 Sep 2007, 11:55 |
|
|
vid 23 Sep 2007, 13:31
how does it handle malformed DLLs (bad header)? I know that testing all PE fields is pretty lot of work, so i wonder if your app simply crashes on such file.
|
|||
|
23 Sep 2007, 13:31 |
|
< Last Thread | Next Thread > |
Forum Rules:
|