Fixed bug with IAT table.

Workshell · Jan 19, 2016 · 9114c15 · 9114c15
1 parent 9aab794
commit 9114c15
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Src/Demo Application/Program.cs b/Src/Demo Application/Program.cs
@@ -16,9 +16,9 @@ static void Main(string[] args)
         {
             //string file_name = Environment.GetCommandLineArgs()[0];
             //string file_name = @"C:\Windows\SysWOW64\kernel32.dll";
-            //string file_name = @"C:\Windows\SysWOW64\shell32.dll";
+            string file_name = @"C:\Windows\SysWOW64\shell32.dll";
             //string file_name = @"C:\Windows\SysWOW64\xpsservices.dll";
-            string file_name = @"c:\windows\system32\advapi32.dll";
+            //string file_name = @"c:\windows\system32\advapi32.dll";
             ExeReader reader = ExeReader.FromFile(file_name);
             Section[] sections = reader.Sections.ToArray();
 

diff --git a/Src/Workshell.PE/Imports/ImportContent.cs b/Src/Workshell.PE/Imports/ImportContent.cs
@@ -165,7 +165,7 @@ private void LoadIAT(Stream stream)
                 long iat_offset = 0;
 
                 if (entry.FirstThunk != 0)
-                    iat_offset = Convert.ToInt32(Section.RVAToOffset(entry.OriginalFirstThunk));
+                    iat_offset = Convert.ToInt32(Section.RVAToOffset(entry.FirstThunk));
 
                 if (iat_offset == 0)
                     return;