Files
Kudaes 2051acda29 Small fix
There was a bug in Dinvoke_rs 0.2.1 that could trigger stack overflow errors in some environments. Fixed by upgrading to version 0.2.2.
2026-05-01 14:07:23 +02:00
..
2026-05-01 14:07:23 +02:00
2026-05-01 14:07:23 +02:00
2026-04-27 13:34:48 +02:00
2026-04-27 13:34:48 +02:00
2026-05-01 14:07:23 +02:00
2026-04-27 13:34:48 +02:00
2026-04-27 13:34:48 +02:00

IdMapper

IdMapper opens a file by its FRN (File Reference Number) and executes it without using its path. It is intended to be used after creating a bindlink, as described in the BindLinks documentation.

The tool asks for:

  • Mode: spawn to create a new process from the mapped section, or load to map the PE in the current process and jump to its entry point.
  • Volume: Drive letter, for example C.
  • FRN: File Reference Number in hexadecimal format.

Usage

C:\Path\To\Puzzle\bin> id_mapper.exe
Select mode (spawn/load): spawn
Select volume (e.g. 'C'): C
Insert FRN: 0x000300000019fa17