Fix PE import parsing when OriginalFirstThunk is 0

bdcht · Oct 13, 2014 · 60bf12c · 60bf12c
1 parent 08d09af
commit 60bf12c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/amoco/system/pe.py b/amoco/system/pe.py
@@ -655,7 +655,10 @@ def __functions(self):
                 except ValueError:
                     logger.warning('invalid dll name RVA in ImportTable')
                 try:
-                    data = self.getdata(e.ImportLookupTableRVA)
+                    if e.ImportLookupTableRVA != 0:
+                        data = self.getdata(e.ImportLookupTableRVA)
+                    else:
+                        data = self.getdata(e.ImportAddressTableRVA)
                 except ValueError:
                     logger.warning('invalid ImportLookupTable RVA')
                 else: