dwex icon indicating copy to clipboard operation
dwex copied to clipboard

Import table in binary from #57

Open sevaa opened this issue 1 year ago • 1 comments

#57

.idata section at RVA 0x1B4000, raw data at 0x124200 Entry for kernel32: Ordinal table at RVA 1B43C4 (3C4 within section) Import address table at RVA D21C0 - outside of .idata section, in .data section at 0x1C0

Modulo that, thunk parsing in PE32+ is off - filebytes assumes 32 bit thunks regardless of file bitness.

sevaa avatar Aug 18 '24 22:08 sevaa

https://github.com/sashs/filebytes/pull/33 - landed but no release yet

sevaa avatar Aug 19 '24 00:08 sevaa