Quote:
|
Originally Posted by MaRKuS-DJM
i'm not searching comfort, but i thought there would be a easier way to get OriginalFirstThunk.
|
Hi ,
I am only responding to your quotation above, I don't have the target.but after adding 80h, you will have VA, at this Va , there is Rva pointing to importDirectory, where you can find the OriginalFirstThunk you are looking for.