如何从 PE 标准 (.exe) 中提取导出表
我已经成功地从“可选标题”中提取了所有所需的信息。所有包含在“标准”字段和“Windows 特定”字段中的内容。然而,当谈到“数据目录”字段时,我发现“导出表”字段中包含的值等于零。
如何在可执行文件中找到“导出表”。
I've managed to successfully extract all desired information from the "Optional Header". All those contained within the "Standard" fields and "Windows-specific" fields. However when it came to the "Data Directories" field, I found the values contained within the "Export Table" field were equal to zero.
How can I locate the "Export Table" within the executable.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
添加到 DeadMG 的答案:问题的标题表明您正在使用 EXE 文件。您会发现大多数 EXE 没有导出表,因为它们不被其他组件“消耗”。大多数情况下,它们充当其他 DLL 的使用者。 EXE 文件通常会导入其他 DLL,并且这些 DLL 可能具有非空导出部分。
Adding to DeadMG's answer: the question's title indicates that you're using an EXE file. You will find that most EXEs do not have export tables, since they are not "consumed" by other components. Most often, they act as consumers for other DLLs. EXE files usually import other DLLs, and these DLLs may have non-empty export sections.
导出表是可选的 - 并非每个可执行文件都有一个。您可能会发现示例 PE 文件中没有该文件。
The export table is optional- not every executable has one. You may just find that a sample PE file doesn't have one.