From ba4754b2157a1ab880667639a0fdf0c8182405be Mon Sep 17 00:00:00 2001 From: cypherpunk Date: Sun, 12 Jan 2014 17:23:32 +0100 Subject: [PATCH] fix for ExportIAT(..) functionality --- TitanEngine/TitanEngine.cpp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/TitanEngine/TitanEngine.cpp b/TitanEngine/TitanEngine.cpp index f002561..e9789d6 100644 --- a/TitanEngine/TitanEngine.cpp +++ b/TitanEngine/TitanEngine.cpp @@ -19412,6 +19412,9 @@ __declspec(dllexport) void TITCALL ImporterAutoSearchIATW(DWORD ProcessId, wchar ULONG_PTR iatSize = NULL; scylla_searchIAT(ProcessId, iatStart, iatSize, SearchStart, false); + + //we also try to automatically read imports so following call to ExportIAT has a chance + scylla_getImports(iatStart, iatSize, ProcessId); RtlMoveMemory(pIATStart, &iatStart, sizeof ULONG_PTR); RtlMoveMemory(pIATSize, &iatSize, sizeof ULONG_PTR);