How is it possible to read an IAT form the DLL?
When you use LoadLibrary or GetModuleHandle, you get a HINSTANCE
or MODULE back. This is actually the address where the DLL is loaded
in memory. So, with knowledge of the PE file format, you can easily
access any PE information you want.
or MODULE back. This is actually the address where the DLL is loaded
in memory. So, with knowledge of the PE file format, you can easily
access any PE information you want.