Advertisement

使用windbg分析PE导入口(INT IAT)

阅读量:
复制代码
    Microsoft (R) Windows Debugger Version 10.0.18362.1 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    CommandLine: C:\Windows\SysWOW64\notepad.exe
    
    ************* Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       srv*C:\SymbolCache*http://msdl.microsoft.com/download/symbols
    Symbol search path is: srv*C:\SymbolCache*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    ModLoad: 00dd0000 00dfb000   notepad.exe
    ModLoad: 778a00

全部评论 (0)

还没有任何评论哟~