Reverse Engineering / Binary Analysis
Visual Basic 6
- Understanding how the Import table works
This paper will give you a graphic representation of the binary structure used for the PE
import table and explains why this design mechanism was required.
A download package is also available which shows a very simple exe in packed and unpacked states.
This package also includes a memory dump with broken imports to give you a simple trainer to try
to restore to apply the knowledge gained in the paper.
A small beta quality open source utility is also available which lets you rewrite the import
table of an exe as you desire.