Open djhaynes opened 12 years ago
We should consider the collection of PE header imports and exports.
Imports: RVA (hexadecimal. example: 0040252C) Filename (string. example: MSVCR80.dll)
Exports: Name (string. the name of the exported function. Example: RegCreateKeyEx()) Entrypoint (hexadecimal. example: 0051454F) *Ordinal (integer. may not be completely necessary. Example: 8)
We should also collect sections.
We should consider the collection of PE header imports and exports.
Imports: RVA (hexadecimal. example: 0040252C) Filename (string. example: MSVCR80.dll)
Exports: Name (string. the name of the exported function. Example: RegCreateKeyEx()) Entrypoint (hexadecimal. example: 0051454F) *Ordinal (integer. may not be completely necessary. Example: 8)