View Full Version : where to get .exe file info?
Raygun
January 7th, 2005, 15:30
No not PE header stuff.
Where can one get info on how linkers do the fixups
and how they put stuff in the import table & import address table etc.
how is the order of thunk values determined etc. etc.
hosiminh
January 8th, 2005, 01:39
LordPe ,PeID , Procdump can give you such info
Raygun
January 10th, 2005, 20:02
Thank u hosiminh. I know your intentions are good. This is a good
answer to some other question.
Bob
January 11th, 2005, 21:24
Microsoft.com has all the info you need..
search msdn for relocs or imports.. etc
Raygun
January 14th, 2005, 12:44
I've looked at MSDN journal (and formerly MS Systems journal). They have some good articles on linkers and the windows loader, especially those in the "Under the Hood" column by Matt Pietrek. But details are few (even Matt alludes to this). Generally, as with most MS stuff its up to hackers to find the details, which is why I was wondering if anyone knew - if anyone had hacked the windows loader to see how it works etc. or hacked the visucal c linker etc. etc.
I know many crackers who think exe files are just assembly language instructions and they forget about the data sections in files. For eg in Vbasic the data sections contain are the control properties - you can get at this and change many things without doing any coding.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.