hasherezade / libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
https://hasherezade.github.io/libpeconv
BSD 2-Clause "Simplified" License
1.09k stars 177 forks source link

Import recovery bug: not found names of imports #5

Closed hasherezade closed 5 years ago

hasherezade commented 5 years ago

In case of import recovery, libPeConv is supposed to first search if the appropriate imports' names are already present in the binary, and if so, to use them and write them back to the destroyed thunks. However, there is a bug that causes that sometimes the appropriate names are not found, although they are present.