Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import table in binary from #57 #58

Open
sevaa opened this issue Aug 18, 2024 · 1 comment
Open

Import table in binary from #57 #58

sevaa opened this issue Aug 18, 2024 · 1 comment

Comments

@sevaa
Copy link
Owner

sevaa commented Aug 18, 2024

#57

.idata section at RVA 0x1B4000, raw data at 0x124200
Entry for kernel32:
Ordinal table at RVA 1B43C4 (3C4 within section)
Import address table at RVA D21C0 - outside of .idata section, in .data section at 0x1C0

Modulo that, thunk parsing in PE32+ is off - filebytes assumes 32 bit thunks regardless of file bitness.

@sevaa
Copy link
Owner Author

sevaa commented Aug 19, 2024

sashs/filebytes#33 - landed but no release yet

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant