-
Notifications
You must be signed in to change notification settings - Fork 161
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Does not handle certain files (notepad.exe) due to Forwarded functions/GOT/PLT? #11
Comments
could you give a reproductive example to test for sure? or this project crash on notepad.exe (win10+?). and what's your meaning of certain files, is catalog signed? |
I guess he tried to say that I cannot load the Windows executables. I am encountering the same situation. On Windows 10 Build 19042, I couldn't load notepad.exe. First, I thought that notepad is not a console application and it uses different subsystem, but then I tried whoami.exe, but it didn't work too. |
I just encounter the same situtation... And yes, I try multiple loaders in github and... they all crash on some exe files (but those exe files works well after being packed by upx and themida). @bnet-aaron-martin |
Certain programs will not load (eg. crash).
However, what is interesting is if you use the address returned from LoadLibraryA("...notepad.exe"), and then treat that memory as the file you mapped (or fopen/read in, whatever), it works.
Many PE loaders have this issue... LoadLibrary is doing some kind of fixup-magic .
The text was updated successfully, but these errors were encountered: