avast / avast/retdec

Display exported name in fileinfo's information dump

Open
#360 0 comments 0 reactions 0 assignees View on GitHub
C-fileinfo enhancement P-output
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

When a PE module has exports (i.e. an export directory), there is name of the module as ASCIIZ, referenced by RVA in `IMAGE_EXPORT_DIRECTORY::Name`. This often contains original name of the binary. It would be great to show this in the fileinfo's verbose listing, maybe even in the short information dump (if present).

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with fileinfo's verbose information dump and the PE export-directory handling. Check how IMAGE_EXPORT_DIRECTORY::Name is resolved from its RVA, then determine whether the short information dump should also include it when present. Done means the original module name appears in the requested output.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
cli
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.