QuasarApp/pe-parse
4
0
Fork 0
mirror of https://github.com/QuasarApp/pe-parse.git synced 2025-05-06 08:49:32 +00:00
Code Issues Projects Releases Wiki Activity

now it gets the VAs of the addresses of imports

Browse Source
This commit is contained in:
Andrew 2013-07-26 21:37:23 -04:00
parent afb2287fdd
commit fe933ff9d6
2 changed files with 3 additions and 2 deletions
dump-prog
dump.cpp
parser-library
parse.cpp

3
dump-prog/dump.cpp

@ -38,7 +38,8 @@ string to_string(T t, ios_base & (*f)(ios_base&)) {
}
void printImports(void *N, RVA impAddr, string &modName, string &symName) {
cout << to_string<uint32_t>(impAddr, hex) << " " << modName << "!" << symName;
cout << "0x" << to_string<uint32_t>(impAddr, hex);
cout << " " << modName << "!" << symName;
cout << endl;
return;
}

2
parser-library/parse.cpp

@ -463,7 +463,7 @@ parsed_pe *ParsePEFromFile(const char *filePath) {
//okay now we know the pair... add it
importent ent;
ent.addr = 0;
ent.addr = curEnt.AddressRVA + p->peHeader.nt.OptionalHeader.ImageBase;
ent.symbolName = symName;
ent.moduleName = modName;
p->internal->imports.push_back(ent);