[FEATURE] Increased limit of functions that IAT must have to trigger …

…Import Table recreation
fengjixuchui · Sep 4, 2021 · bcfe7f4 · bcfe7f4
1 parent 7ccc63a
commit bcfe7f4
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/postprocessors/imp_rec/imp_reconstructor.cpp b/postprocessors/imp_rec/imp_reconstructor.cpp
@@ -5,6 +5,9 @@
 
 #include <fstream>
 
+//!  the minimal function count that the additional Import Table must have to trigger Import Table recreation (if run in autodetect mode)
+#define MIN_FUNC_COUNT 3
+
 using namespace pesieve;
 
 namespace pesieve {
@@ -43,7 +46,7 @@ bool pesieve::ImpReconstructor::hasNewImportTables() const
 		const IATBlock* iblock = iats_itr->second;
 		if (!iblock->isMain 
 			&& iblock->isTerminated
-			&& iblock->countThunks() > 1)
+			&& iblock->countThunks() >= MIN_FUNC_COUNT)
 		{
 			has_new_table = true;
 			break;