adplus-dvertising
frame-decoration

Question

How are the addresses of the imported functions found during runtime?

a.

By going over the importing module's export table

b.

By going over the exporting module's import table

c.

By going over the exporting module's export table

d.

By going over the importing module's import table

Posted under Reverse Engineering

Answer: (c).By going over the exporting module's export table Explanation:The addresses of the imported functions are found by going over the exporting module's export table.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. How are the addresses of the imported functions found during runtime?

Similar Questions

Discover Related MCQs

Q. What is the purpose of the IAT in a module?

Q. What does the linker do to resolve each entry in the IAT?

Q. What are the Optional Directories in the Portable Executable File Format?

Q. What is the Export Table in the Portable Executable File Format?

Q. What is the Import Table in the Portable Executable File Format?

Q. What is the Resource Table in the Portable Executable File Format?

Q. What is the Import Address Table (IAT) in the Portable Executable File Format?

Q. What is the relevance of I/O in reversing?

Q. What are the two layers of I/O channels in Windows?

Q. What is the I/O system responsible for in Windows?

Q. What are generic requests in the I/O system?

Q. How does the I/O system enable the creation of generic file system drivers and generic storage drivers?

Q. What is the I/O system?

Q. What are filter drivers?

Q. What is the purpose of monitoring the I/O system for reversers?

Q. What kind of I/O element can a monitored device represent?

Q. What determines the type of data received by a filtering component?

Q. What is the Win32 subsystem responsible for?

Q. What is the role of the USER component in the Win32 subsystem?

Q. What is the role of the GDI component in the Win32 subsystem?