You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 27, 2023. It is now read-only.
I understand that 00001B80 means that __security_init_cookie is found at 00001B80 offset to the image base address, but I do not understand what the other values mean.
The text was updated successfully, but these errors were encountered:
0001:0001B80 means that it is found at offset 0001B80 from section 0001. If you want to know the file offset of section 0001, then use the -headers option to cvdump. or use dumpbin /headers on the exe.
Flags is a bitwise combination of the following values:
@zjturner Thank you for the reply. I did cvdump -headers and realised that there are 'SECTION HEADERS' and 'ORIGINAL SECTION HEADERS'. What's the difference between them?
I actually don’t know, my guess is it has to do with incremental linking.
Try doing doing a clean build, then add a function and do an incremental
link. Probably section headers will change but original section headers
won’t
So, I used cvdump to dump my PDB file. I would like to understand what these values in S_PUB32 mean:
eg.
S_PUB32: [0001:00001B80], Flags: 00000002, ___security_init_cookie
I understand that
00001B80
means that__security_init_cookie
is found at 00001B80 offset to the image base address, but I do not understand what the other values mean.The text was updated successfully, but these errors were encountered: