fix: reapply Windows compilation fixes after formatter revert

- Import GetThreadContext, CONTEXT, CONTEXT_CONTROL, CONTEXT_DEBUG_REGISTERS from Win32::System::Kernel (not Threading/Debug)
- Add conditional HashMap import for Windows-only IAT detection
- Prefix unused variables with underscore: _file_header, _suspicious_start_patterns
This commit is contained in:
pandaadir05
2025-11-21 14:59:11 +02:00
parent 4ea4972e6a
commit 753b7bda5c
2 changed files with 11 additions and 8 deletions

View File

@@ -7,6 +7,8 @@
//! - Function address resolution
use crate::{GhostError, Result};
use serde::{Deserialize, Serialize};
#[cfg(windows)]
use std::collections::HashMap;
/// PE data directory indices
pub const IMAGE_DIRECTORY_ENTRY_EXPORT: usize = 0;
@@ -113,7 +115,7 @@ pub fn parse_iat_from_memory(
// Read PE signature and file header
let _pe_sig = read_u32(pid, nt_header_addr, &memory_reader)?;
let file_header_addr = nt_header_addr + 4;
let file_header = read_file_header(pid, file_header_addr, &memory_reader)?;
let _file_header = read_file_header(pid, file_header_addr, &memory_reader)?;
// Read optional header magic to determine if 32-bit or 64-bit
let opt_header_addr = file_header_addr + mem::size_of::<crate::memory::ImageFileHeader>();