AddImport produces corrupt binary on linux about penet HOT 3 CLOSED

@superewald That is some very strange behavior. I'll try to have look in the next days, but a.t.m. I cannot think of any reason there should be a difference between Windows and Linux.

from penet.

Yes, I was very confused too. I've noticed the patched binary on linux is also ~3.6 MB larger than the patched binary on windows.

One thing that confuses me still (but probably isn't related to this issue) is the fact that if I compare the (working) patched and original files, there is just no difference at all (even though the DLL is added to the IAT). I guess I'm missing something about how PE headers work.

I've uploaded 3 files in case you are unable to reproduce:

• Original binary
• Patched on Windows (working)
• Patched on Linux

from penet.

Thanks for the files. Are you sure the "Patched on Windows" is the correct one?

0f4a732484f566d928c580afdae6ef01c002198dd7158cb6de29b9a4960064c7 Original.exe
0f4a732484f566d928c580afdae6ef01c002198dd7158cb6de29b9a4960064c7 Patched-on-Windows.exe
02cce81e91fe6b98568892f7d921c3568212dd13a0a2b28c33157f1f9efed984 Patched-on-Linux.exe

Original and the patched one have the same hash sum, which means it's the same wile without any changes.

The binary patched on Linux shows an additional import for "proxy.dll" which is missing in both, the original and Windows patched one.

from penet.