portable-executable
Microsoft's ASLR is weird
I watched a ASLRed dll images\'s based address for 32bit Process. It\'s not a fully randomization. It just randomizated 1/2 probability.[详细]
2023-01-15 06:02 分类:问答Do exported functions have hint?
Dependency walker (depends.exe) shows a \'Hint\' column for exported functions. As far as I understand the Portable Executable format, exported functions do not have hint. Can someone tell me whether[详细]
2023-01-12 01:25 分类:问答Windows portable executable resources - looking for embedded manifests structure description
i\'m looking for a description of the manifest embedded in PE files. I know it\'s an XML file, what i\'m looking for is a description of its structure and/or f开发者_运维技巧ields.So,[详细]
2023-01-11 15:20 分类:问答How to map a file offset in an EXE to its PE section
I\'ve opened up a program I wrote with ImageHlp.dll to play around with it a little, and I noticed that there seem to be large gaps in the file.As I understand it, for each PE section, the section hea[详细]
2023-01-10 16:49 分类:问答Thunk table in import address table?
What is a thunk table in relation to the import address table that\'s used in EXE files to import functions used in external D开发者_如何学运维LLs?[详细]
2023-01-10 10:44 分类:问答How to replace allocators of stl with actual source code
I need to replace allocators with their original source code. I am extracting exported methods from the PE export table and facing strange lengthy allocators where STL containers were used in the orig[详细]
2023-01-09 15:39 分类:问答In resources of a executable file, how does one find the default icon?
i need to find the default icon of a windows executable (PE file = dll, exe, com..) programatically. I do know how to walk throught the resources and identify what is an icon, what a cursor etc, but a[详细]
2023-01-08 05:08 分类:问答What field of PE Headers tells that whether a valid PE file or not?
I need to validate whether the given binary is a PE file or not (e.g. if I rename JS/HTML or .class files to .exe or .dll), it won\'t still be PE files. Parsing PE files would give me info about this[详细]
2023-01-07 07:17 分类:问答What are the files from the 'make' of git that I actually need to run git?
I\'m trying to \"portablize\" git, so I want to send the required executables from the make process of git to my hosted web server. Can I do that? Do 开发者_JS百科you think the executables will work?T[详细]
2023-01-06 20:08 分类:问答Getting Types in Win32 Dll
I want to ge开发者_StackOverflow中文版t the types and details in a plain Win32.dll just like we can in a COM. In COM, everything embed inside idl results in TLB, MSFT exposes APIS in which we can extr[详细]
2023-01-03 11:44 分类:问答