使用windbg分析PE导入口(INT IAT)
发布时间
阅读量:
阅读量
Microsoft (R) Windows Debugger Version 10.0.18362.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
CommandLine: C:\Windows\SysWOW64\notepad.exe
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*C:\SymbolCache*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*C:\SymbolCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
ModLoad: 00dd0000 00dfb000 notepad.exe
ModLoad: 778a00
全部评论 (0)
还没有任何评论哟~
