Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 04-20-2005, 04:15 AM
roozbeh roozbeh is offline
Junior Member
 
Join Date: Apr 2005
Posts: 1
Default

Hi

i have problems adding my dll and functions to my windows ce exe file using iidking.
i like to know how can i manually do this,for example by using lordpe and puting it in the sections

and how can i know more about those thunkfirst,thunkvalues and ......

regards
Reply With Quote
  #2  
Old 04-21-2005, 07:28 AM
AndreaGeddon AndreaGeddon is offline
Administrator
 
Join Date: Dec 2002
Location: Italy
Posts: 42
Default

Quote:
Originally posted by roozbeh@Apr 20 2005, 08:15 AM
Hi

i have problems adding my dll and functions to my windows ce exe file using iidking.
i like to know how can i manually do this,for example by using lordpe and puting it in the sections

and how can i know more about those thunkfirst,thunkvalues and ......

regards
[snapback]1003[/snapback]
LordPe allows you to add every dll/import function you want. If you want to do it by hand you should study documents about the PE structure. I've found a nice document:
http://elfz.laacz.lv/ms_exe_spec.html
there are also a lot of other good documents (O'Leary, Luevelsmeyer and so on), however it is just a strcture, and you find its definitions in winnt.h include file (search IMAGE_NT_HEADERS).
When you add a dll/import by hand you just have to modify and probably relocate the import table pointed by the data directory
Bye!
AndreaGeddon
Reply With Quote
  #3  
Old 04-27-2005, 09:53 AM
sna sna is offline
Administrator
 
Join Date: Jun 2003
Posts: 76
Default

Hello.

For future reference, the PE specification is available from Microsoft:
Microsoft Portable Executable and Common Object File Format Specification

Having not worked with CE myself I am unable to say anything about the actual format used. I did however find references to something called Common Executable Format (CEF) which appears to be a CE module with no native code in it, only byte code. I only barely skimmed the article though, so I wouldn't know how CEF relates to the PE format or if they are at all related. Any input on this would be appreicated...

Regards, sna

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.