You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During the full Import Table reconstruction (/imp 3), PE-sieve collects all addresses of exports that are being filled in the module, and constructs the table out of them.
However, executables may call their own exported functions. It leads to an undesirable situation when PE's own exports are included in the new import table. Example below:
Such functions should be filtered out and not included in the generated table.
The text was updated successfully, but these errors were encountered:
During the full Import Table reconstruction (
/imp 3
), PE-sieve collects all addresses of exports that are being filled in the module, and constructs the table out of them.However, executables may call their own exported functions. It leads to an undesirable situation when PE's own exports are included in the new import table. Example below:
Such functions should be filtered out and not included in the generated table.
The text was updated successfully, but these errors were encountered: