在PEB中导入地址表 [英] Import Address Table in PEB

问题描述

我已经能够从Process Environment Block找到加载的DLL，入口点，基地址和堆栈地址。



现在我想找到哪里导入地址表和导出地址表地址位于PEB中，我该怎么办？

I've been able to find loaded DLLs, entry point, base address and stack address from Process Environment Block.

Now I'd like to find where the Import Address Table and Export Address Table addresses are located in the PEB, how could I do that?

推荐答案

参见http://msdn.microsoft.com/en-gb/library/windows/desktop/aa813706%28v = vs.85％29.aspx [ ^ ]。

这篇关于在PEB中导入地址表的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！