search

andyvand / pefile

Automatically exported from code.google.com/p/pefile
Other
0 stars 0 forks source link

pefile cannot read imports if first import descriptor is virtual #58

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. download: 
http://corkami.googlecode.com/svn/trunk/src/PE/bin/imports_virtdesc.exe
2. execute the following script with imports_virtdesc.exe as argument:

pe =  pefile.PE(sys.argv[1], fast_load=True)
pe.parse_data_directories()
print pe.dump_info()

What is the expected output? What do you see instead?

No imports are shown.
I expect something like:

kernel32.dll
rva: 4224 (0x1080), name: ExitProcess, hint: 0
msvcrt.dll
rva: 4168 (0x1048), name: printf, hint: 0

What version of the product are you using? On what operating system?

pefile 1.2.10-139
Ubuntu 14.04

Please provide any additional information below.

Original issue reported on code.google.com by Struppi...@googlemail.com on 11 Nov 2014 at 9:42