Windows/API／MFC1 PEB, TEB PEB 32bit >>> dword ptr fs:[0x30] 64bit >>> qword ptr gs:[0x60] ※ 32bit 기준 구조체 typedef struct _PEB { BOOLEAN InheritedAddressSpace; BOOLEAN ReadImageFileExecOptions; BOOLEAN BeingDebugged; BOOLEAN Spare; HANDLE Mutant; PVOID ImageBaseAddress; PPEB_LDR_DATA LoaderData; PRTL_USER_PROCESS_PARAMETERS ProcessParameters; PVOID SubSystemData; PVOID ProcessHeap; PVOID FastPebLock; PPEBLOCKROUTINE FastPe.. 2023. 3. 13. 이전 1 다음