Tal Maimon
Tal Maimon
@m4b Thanks for reviewing, I'll do the fixes and make sure the PR passes the tests.
Hey! @m4b This still seems to be an issue, I suspect that it's because when parsing for PE the `FirstThunk` pointer is treated as the pointer for the IAT, even...
Also I fixed this by using the IAT in the import directory entry as base and adding a counter, in the following code: https://github.com/m4b/goblin/blob/master/src/pe/import.rs#L279-L288 This is the code that solves...
I actually agree with your statement, the values of IAT entries could be useful for other things, and this is an extra functionality. Though I do think that it should...
The RVA is useful when disassembling or patching binaries.  For example IDA knows this is a `jmp` to the function `CloseHandle` because the operand is `CloseHandle`'s RVA. The loader...
Wow nice find, I guess I'll have to fix it in my PR. About your question the loader uses the ILT, and overrides the IAT. To be honest I'm not...
Do you have an example file that triggers this behavior?
I see, sorry for the long time for the reply. How do you want to go forward with this? I think both options are legit, I rather leaving a hole,...
I experience the same error
Anything new around this?