mirror of
https://github.com/mandiant/capa-rules
synced 2026-06-08 15:41:20 +00:00
b7aa190381
Identify parsing PE export data, used when writing your own `GetProcAddress()` implementation. reference: Practical Malware Analysis, Chapter 19 f