-
-
Notifications
You must be signed in to change notification settings - Fork 24
Open
Description
.idata section at RVA 0x1B4000, raw data at 0x124200
Entry for kernel32:
Ordinal table at RVA 1B43C4 (3C4 within section)
Import address table at RVA D21C0 - outside of .idata section, in .data section at 0x1C0
Modulo that, thunk parsing in PE32+ is off - filebytes assumes 32 bit thunks regardless of file bitness.
Metadata
Metadata
Assignees
Labels
No labels