發表文章

目前顯示的是有「pefile」標籤的文章

exe function importt table executable Import Address Table IAT Import Directory Table ILT IAT Windows Portable Executable PE format pefile Portable Executable profile

codeproject 2873/tips-on-internationalization-of-software 430684/loading-win-dlls-manually-without-loadlibrary 3356/Internationalization-and-Multiple-Language-Support?msg=1114625#xx1114625xx  The Windows CRT exposes 5 symbols mainCRTStartup , wmainCRTStartup , wWinMainCRTStartup , _DllMainCRTStartup and WinMainCRTStartup https://github.com/MicrosoftDocs/cpp-docs/blob/main/docs/atl/linking-to-the-crt-in-your-atl-project.md https://learn.microsoft.com/zh-tw/cpp/build/reference/entry-entry-point-symbol?view=msvc-170 https://stackoverflow.com/questions/28005324/linking-to-crt-unresolved-external-symbol-winmaincrtstartup https://reverseengineering.stackexchange.com/questions/16870/import-table-vs-import-address-table https://learn.microsoft.com/zh-tw/windows/win32/debug/pe-format?redirectedfrom=MSDN https://learn.microsoft.com/zh-tw/windows/win32/debug/pe-format?redirectedfrom=MSDN#import_directory_table import address table (IAT) entry point function https://learn.microsoft.com/zh-tw/c...

stdafx afxwin afxext afxdisp afxdtctl afxcmn afxres MFC Predefined Symbols , ATL headers (afx.h, afxwin.h, afxres.h)

 https://learn.microsoft.com/en-us/cpp/windows/mfc-predefined-symbols?view=msvc-170   AFX_ID_PREVIEW_CLOSE AFX_ID_PREVIEW_NEXT AFX_ID_PREVIEW_NUMPAGE AFX_ID_PREVIEW_PREV AFX_ID_PREVIEW_PRINT AFX_ID_PREVIEW_ZOOMIN AFX_ID_PREVIEW_ZOOMOUT AFX_IDB_CHECKLISTBOX_95 AFX_IDB_MINIFRAME_MENU AFX_IDC_BROWSE AFX_IDC_BROWSER AFX_IDC_CHANGE AFX_IDC_CLEAR AFX_IDC_COLOR_BLACK AFX_IDC_COLOR_BLUE AFX_IDC_COLOR_CYAN AFX_IDC_COLOR_DARKBLUE AFX_IDC_COLOR_DARKCYAN  https://learn.microsoft.com/zh-tw/cpp/mfc/reference/application-information-and-management?view=msvc-170 AfxBeginThread AfxContextMenuManager AfxEndThread AfxFindResourceHandle AfxFreeLibrary AfxGetApp AfxGetAppName AfxGetInstanceHandle AfxGetMainWnd AfxGetPerUserRegistration

winapi tresourcestream resources rcdata file delphi kernel32 system FindResourceA LoadResource WindowsBase

  winapi  resources rcdata  WinBase.h resource.h kernel32.dll" "system"   FindResourceA winapi tresourcestream resources rcdata delphi kernel32  system FindResourceA LoadResource WindowsBase https://github.com/search?q=repo%3Amicrosoft%2Fwindows-rs%20FindResourceA&type=code FindResource MAKEINTRESOURCE https://learn.microsoft.com/zh-tw/windows/win32/menurc/using-resources LoadLibrary   FindResource LoadResource LockResource BeginUpdateResource UpdateResource EndUpdateResource https://docwiki.embarcadero.com/Libraries/Alexandria/en/System.FindResource https://docwiki.embarcadero.com/Libraries/Alexandria/en/System.Classes.TResourceStream http://docwiki.embarcadero.com/RADStudio/Alexandria/en/Streams,_Reader_and_Writers https://docwiki.embarcadero.com/Libraries/Alexandria/en/System.Classes.ReadComponentRes embarcadero TResourceStream https://docwiki.embarcadero.com/Libraries/Alexandria/en/System Lazarus FPC  TResourceStream https://www.freepascal...

reverse_engineering

  CFF Explorer API Monitor WinHex Hiew  BIN/CMD/ELF formats   BIN/CMD/ELF formats TAR  GZIP NE, LE, LX, PE/PE32+, ELF/ELF64(little-endian), Mach-O(little-endian)  TE/TE64  NLM, DSK, LAN Bytecode Viewer — Java decompiler Fiddler Scylla Relocation SecTAR or GZIP tion Editor PEiD HIEW  hex editor deasembler 64dbg    IDA Pro, Hex Rays dnSpy NET ultimate tool Sandboxie  Run unknown code without a fear Resource Hacker - Hack the planet! DiE   Protections obfuscators identifier Bytecode Viewer   Java decompiler (also for Android apps) Process Monitor  Monitor system changes Wireshark  Network sniffer https://www.apriorit.com/dev-blog/366-software-reverse-engineering-tools https://www.trackawesomelist.com/Hack-with-Github/Awesome-Hacking/readme/ https://github.com/ReversingID/Awesome-Reversing https://github.com/tylerha97/awesome-reversing https://online.yu.edu/katz/blog/best-reverse-engineering-software-2022 h...

Small-C is both a subset of the C programming language, suitable for resource-limited microcomputers and embedded systems, Cross Small-C implementation based microcomputers

 https://en.wikipedia.org/wiki/Small-C https://godbolt.org/   https://forum.community.tw/t/topic/65  https://www.renesas.com/us/en/software-tool/cc-compiler-package-superh-family#additional_details "C/C++ Compiler Package for SuperH Family Software Component List (PDF | English, 日本語)".   https://dansanderson.com/mega65/ https://dansanderson.com/mega65/cross-development/ https://dansanderson.com/mega65/cross-development-2/           https://m65digest.substack.com/           https://m65digest.substack.com/p/cross-development-for-fun-and-profit                              https://files.mega65.org/html/main.php?id=4fc0ab25-e381-4a64-a43c-d1d338166a7c           https://files.mega65.org/html/main.php?id=8b...