0

I'm learning a bit about PE files. The thing I've struggling a bit now it the First Thunk and Original First Thunk fields. To understand the difference between them I've read this post and that article. To test the problem "live" I've opened said shell32.dll or notepad.exe files in PE-bear and IDA BUT that appears the there is NO import binding in case of that files in contrast to what the articles say. Here are my question now:

Why there is NO import binding in these files?

Here are the first and the second article.

Please don't down-vote the question if it appears to lame because I'm just newbie in the topic.

5
  • there's absolutely no article
    – mimak
    Commented Aug 15, 2023 at 20:47
  • @mimak I've added the links now.
    – Daros911
    Commented Aug 16, 2023 at 16:43
  • @Robert I've added the links now.
    – Daros911
    Commented Aug 16, 2023 at 16:44
  • @mimak Are You alive!? Can You try to answer the question now?
    – Daros911
    Commented Aug 17, 2023 at 15:58
  • @Robert Are You alive!? Can You try to answer the question now?
    – Daros911
    Commented Aug 17, 2023 at 15:59

0

Browse other questions tagged or ask your own question.