seliaste/lief-iat-reconstruction
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added patching of xrefs to addresses obtained with getprocaddr (the code

Browse source 
is not yet cleaned up)
This commit is contained in:
Aéna Aria 2026-03-30 12:24:08 +02:00
parent b8f201cbab
commit efc8da2ff8
2 changed files with 147 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

28
rsc/upx-hostname.exe.bin_iat_wave1.json
View file

@ -24,5 +24,31 @@
"EBP": "0x000cff94 ",
"ESP": "0x000cff8c",
"eflags": "0x00000203"
}
},
"prevwave_getprocaddr": [
{ "function": "FormatMessageA", "func_addr": "0x75985fbd" },
{ "function": "LocalFree", "func_addr": "0x75962d3c" },
{ "function": "GetModuleHandleA", "func_addr": "0x75961245" },
{ "function": "GetLastError", "func_addr": "0x759611c0" },
{ "function": "__p__commode", "func_addr": "0x752c27c3" },
{ "function": "__p__fmode", "func_addr": "0x752c27ce" },
{ "function": "__set_app_type", "func_addr": "0x752c2804" },
{ "function": "_controlfp", "func_addr": "0x752be1e1" },
{ "function": "_cexit", "func_addr": "0x752c37d4" },
{ "function": "_adjust_fdiv", "func_addr": "0x753532ec" },
{ "function": "_except_handler3", "func_addr": "0x752dd770" },
{ "function": "_XcptFilter", "func_addr": "0x752ddc75" },
{ "function": "_exit", "func_addr": "0x7531b2c0" },
{ "function": "_c_exit", "func_addr": "0x7531b2db" },
{ "function": "__setusermatherr", "func_addr": "0x753477ad" },
{ "function": "_initterm", "func_addr": "0x752bc151" },
{ "function": "__getmainargs", "func_addr": "0x752c2bc0" },
{ "function": "__initenv", "func_addr": "0x753504e8" },
{ "function": "_write", "func_addr": "0x752c4078" },
{ "function": "strchr", "func_addr": "0x752bdbeb" },
{ "function": "puts", "func_addr": "0x75328d04" },
{ "function": "exit", "func_addr": "0x752c36aa" },
{ "function": "s_perror", "func_addr": "0x6c8a1be4" },
{ "function": "CharToOemBuffA", "func_addr": "0x76aeb1b0" }
]
}