Log in

View Full Version : Delayed import table?


dELTA
December 21st, 2003, 11:17
In the latest release if IDA Pro (4.60), Datarescue boasts some new features related to "Delayed import tables":

hxxp://www.datarescue.com/idabase/idanew451.htm
hxxp://www.datarescue.com/idabase/10reasons.htm

I have never heard about this term before, and apparently this is the case for most other people too, since google only gives one single hit on the term "delayed import table" in addition to the IDA pages, and that page seems to be about some custom hack to delay recursive loading of DLLs.

So, does anyone know what these "delayed import tables" are? Sounds like fun.

volodya
December 21st, 2003, 13:50
dELTA, it is not a custom hack. It is the pretty widespread thing in PE file.
Here is the link:

http://www.microsoft.com/msj/1298/hood/hood1298.aspx

here is the define:

#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT 13
//MS linker can assemble the code!!!!

bart
December 21st, 2003, 19:37
but it isnt used widely, if i remember MyIE uses delayed import table (http://www.myie2.com/html_en/home.htm)

dELTA
December 21st, 2003, 20:27
Cool, thanks.
A little unfortunate for Datarescue though that they use a term to describe this that no one else on the entire google-indexed part of the Internet uses (ok, except one single guy in one single post in the Wine developer mailing list back in 2000 ). But then again, as we learn every day, not too many people use google to look up things anyway.