Quote:So at offset 0xB0 + 0x80 = 0x130 is the Import Directory RVA. There you find 44200000 which is in the correct order 0x00002044. RVA 0x2044 is file offset 0x844.
var
This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)