dwex
dwex copied to clipboard
Import table in binary from #57
#57
.idata section at RVA 0x1B4000, raw data at 0x124200 Entry for kernel32: Ordinal table at RVA 1B43C4 (3C4 within section) Import address table at RVA D21C0 - outside of .idata section, in .data section at 0x1C0
Modulo that, thunk parsing in PE32+ is off - filebytes assumes 32 bit thunks regardless of file bitness.
https://github.com/sashs/filebytes/pull/33 - landed but no release yet