From 6a6cf37b0242f91b73b0bf41575ce95f78c3304d Mon Sep 17 00:00:00 2001 From: Tamas K Lengyel Date: Wed, 12 Feb 2020 18:21:32 -0700 Subject: [PATCH] pdbconv: save _imp functions in JSON --- volatility/framework/symbols/windows/pdbconv.py | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/volatility/framework/symbols/windows/pdbconv.py b/volatility/framework/symbols/windows/pdbconv.py index f45360ecc..d48e49747 100644 --- a/volatility/framework/symbols/windows/pdbconv.py +++ b/volatility/framework/symbols/windows/pdbconv.py @@ -520,11 +520,7 @@ class PdbReader: """Strips unnecessary components from the start of a symbol name.""" new_name = name - if new_name[:7] in ["__imp__", "__imp_@"]: - new_name = new_name[7:] - elif new_name[:6] in ["__imp_"]: - new_name = new_name[6:] - elif new_name[:1] in ["_", "@", "\u007F"]: + if new_name[:1] in ["_", "@", "\u007F"]: new_name = new_name[1:] name_array = new_name.split("@")