Thunk table in import address table?

Thunks are a part of the Import table ( IMAGE_DIRECTORY_ENTRY_IMPORT ) and Delay Import Table ( IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT ). They are described http://msdn.microsoft.com/en-us/library/ms809762.aspx .

Up vote 2 down vote favorite share g+ share fb share tw.

Dll pe thunk link|improve this question edited Oct 29 '10 at 4:45Roger Pate asked Aug 7 '10 at 14:10Tony The Lion12.7k32375 76% accept rate.

A good place to start: sandsprite.com/CodeStuff/Understanding_i... – quantumSoup Aug 7 '10 at 14:13.

Thunks are a part of the Import table (IMAGE_DIRECTORY_ENTRY_IMPORT) and Delay Import Table (IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT). They are described http://msdn.microsoft.com/en-us/library/ms809762.aspx. I'll look at my old source code and will post later a working code which dump both this tables inclusive binding information.

UPDATED: Here is a code which I fond in one of my old program. It support only 32-bit PE, but can be easy modified to 64-bit. By the way you can see, that it dump also binding information.

To test this bind the PE which you want to dump with respect of bind. Exe (use for example, bind. Exe -u -v Test.

Dll). The code consist from about 1000 lines, so I could not post it here. I receive an error message Oops!

Your edit couldn't be submitted because: body is limited to 30000 characters; you entered 55095 So I placed it here: http://www.ok-soft-gmbh.com/ForStackOverflow/PEInfo.c. I hope the code will help you better as a long description.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.