portable-executable
Can PEiD deal with hard coded software limitations?
As we know PEiD can detect most common pac开发者_Python百科kers, cryptors and compilers for PE files, but can it detect the hard coded stuff(not by 3rd party packers,etc),like software usage date limi[详细]
2023-01-17 03:16 分类：问答How to understand the PE header in this graph?
开发者_运维技巧 IMO,this should hold: rva = raw - imagebase which is not the case in the graph,why?The entry point RVA, entry point raw address, and image base address are not related in that way.[详细]
2023-01-16 22:56 分类：问答What's the difference between objdump and Dumpbin in windows?
It seems both of them ca开发者_如何学运维n dump the contents of a binary file, then what\'s the difference?There isn\'t much difference.[详细]
2023-01-16 21:45 分类：问答About the code section of PE format
Is it true that entry-point always belongs to code section? Is the 开发者_如何学Ccode section consecutive or divided into several blocks?[详细]
2023-01-16 21:25 分类：问答About ImageBase of .EXE in windows
I just learned ImageBase is specified in PE format,and OS will load it to the exact position for .EXE , then 开发者_如何学Pythoncomes the question:[详细]
2023-01-16 21:15 分类：问答How to investigate the calling convention of PE binary file in windows?
Is there a tool to show whether the 开发者_Go百科calling convention is _cdecl or _stdcall or else?Calling conventions are per function - not PE file.[详细]
2023-01-16 19:10 分类：问答Understanding numbers in PE
From the above graphs I know there are 9 sections,开发者_Python百科but why in the 1st graph it shows 0900?[详细]
2023-01-16 17:17 分类：问答About the entry point of PE in Windows
Is it开发者_开发百科 always at the lowest address of code section?No, not necessarily.The PE entry point is defined in the IMAGE_OPTIONAL_HEADER structure, in the AddressOfEntryPoint field:[详细]
2023-01-16 14:25 分类：问答How to programatically find the bytecode (CIL) in a .Net executable/dll?
I would like to open a PE file (which i know is a .Net assembly) and find where the .Net bytecode is (ideally starting at the entrypoint). I know that the PE header data (entrypoint RVA) take me just[详细]
2023-01-15 21:18 分类：问答Save data in executable
I have a portable executable that saves data to a file in the same folder as the executable. Is there any way that I can save data into the executable itself when I close the app?[详细]
2023-01-15 18:22 分类：问答
![Interactive visualization of a graph in python [closed]](https://www.devze.com/res/2023/04-10/09/92d32fe8c0d22fb96bd6f6e8b7d1f457.gif)
加载中,请稍侯......