We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
win10.zip
Two imports are missing from the reconstructed import table:
However, they have been correctly recognized, because they are present in the report:
1dee14,76375d30,user32.CallWindowProcW #1538 1dee18,7637bca0,user32.CallNextHookEx #1536 1dee1c,76381a60,user32.BeginPaint #1522 1dee20,7636e110,user32.AdjustWindowRectEx #1509 <== missing 1dee24,76381680,user32.ActivateKeyboardLayout #1505 <== missing 1dee2c,76164800,gdi32.UnrealizeObject #1954
Import reconstruction option: /imp A. Complete imports listing:
/imp A
400000.win10.exe.imports.txt
Complete dumped material:
process_2480.zip
The dump has been made with the executable being paused at OEP, RVA = 0x1D14B0.
The text was updated successfully, but these errors were encountered:
[BUGFIX] Fixed reconstructing IAT when some of the functions repeat (…
a914597
…Issue #131)
After the patch applied, the missing entries are filled in:
Sorry, something went wrong.
hasherezade
No branches or pull requests
Sample
win10.zip
Issue
Two imports are missing from the reconstructed import table:
However, they have been correctly recognized, because they are present in the report:
Import reconstruction option:
/imp A
.Complete imports listing:
400000.win10.exe.imports.txt
Complete dumped material:
process_2480.zip
The dump has been made with the executable being paused at OEP, RVA = 0x1D14B0.
The text was updated successfully, but these errors were encountered: