Skip to content

Implement Method II #21

Description

@oAGoulart

Method II requires completely rebuilding .idata section, such as to:

  1. ImportDirectory deserialization:
    1. iterate through every entry (each DLL).
    2. for each entry, iterate INT/IAT and extract every imported function's Hint/Name RVA.
    3. lookup RVA for the value of the Hint/Name.
    4. copy the value into an ImportFunction auxiliary struct.
  2. calculate where everything will go, use offsets for each block.
  3. serialize each ImportDirectory and its ImportFunctions with the new payload entries.

Warning

I may have forgotten a step or other important details about how to implement this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions