admin/naksyn-PythonMemoryModule
1
0
Fork 0
mirror of https://github.com/naksyn/PythonMemoryModule synced 2026-06-06 16:24:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2 from rkbennett/main

Browse Source 
fixes issues for import ordinal entries
This commit is contained in:
naksyn
2023-01-08 10:48:02 +01:00
committed by GitHub
parent fc3dbea6c0 a43f405445
commit ec4c50ac43
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pythonmemorymodule/__init__.py
+5 -2
View File
@@ -768,9 +768,12 @@ class MemoryModule(pe.PE):
funcref = cast(funcrefaddr, PFARPROC)
if entry_imports[j].import_by_ordinal == True:
importordinal= entry_imports[j].ordinal.decode('utf-8')
if 'decode' in dir(entry_imports[j].ordinal):
importordinal= entry_imports[j].ordinal.decode('utf-8')
else:
importordinal= entry_imports[j].ordinal
self.dbg('Found import ordinal entry, %s', cast(importordinal, LPCSTR))
funcref.contents = GetProcAddress(hmod, importordinal)
funcref.contents = GetProcAddress(hmod, cast(importordinal, LPCSTR))
else:
importname= entry_imports[j].name.decode('utf-8')
self.dbg('Found import by name entry %s , at address 0x%x', importname, entry_imports[j].address)
pythonmemorymodule/pefile.py
+1 -1
View File
@@ -38,7 +38,7 @@ from hashlib import md5
import functools
import copy as copymod
import pythonmemorymodule.ordlookup
import pythonmemorymodule.ordlookup as ordlookup
codecs.register_error("backslashreplace_", codecs.lookup_error("backslashreplace"))