Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ### from dumpbin /HEADERS
- SECTION HEADER #1
- .text name
- 56 virtual size
- 1000 virtual address (0000000180001000 to 0000000180001055)
- SECTION HEADER #2
- .rdata name
- 1FE virtual size
- 2000 virtual address (0000000180002000 to 00000001800021FD)
- ### from dumpbin /RAWDATA
- RAW DATA #1
- 0000000180001000: 48 83 EC 48 0F 10 05 0E 10 00 00 48 8D 4C 24 20 H.ìH.......H.L$
- 0000000180001010: 0F 11 41 09 0F 28 05 F5 0F 00 00 0F 29 01 FF 15 ..A..(.o....).ÿ.
- 0000000180001020: DC 0F 00 00 90 48 83 C4 48 C3 48 83 EC 48 0F 10 Ü....H.ÄHAH.ìH..
- 0000000180001030: 05 E4 0F 00 00 48 8D 4C 24 20 0F 11 41 09 0F 28 .ä...H.L$ ..A..(
- 0000000180001040: 05 CB 0F 00 00 0F 29 01 FF 15 B2 0F 00 00 90 48 .E....).ÿ.²....H
- 0000000180001050: 83 C4 48 C3 C3 00 .ÄHAA.
- RAW DATA #2
- 0000000180002000: F0 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d!..............
- 0000000180002010: 6B 00 65 00 72 00 6E 00 65 00 6C 00 33 00 32 00 k.e.r.n.e.l.3.2.
- 0000000180002020: 2E 00 64 00 6C 00 6C 00 00 00 00 00 00 00 00 00 ..d.l.l.........
- 0000000180002030: 00 00 00 00 C6 D8 AC 58 00 00 00 00 0D 00 00 00 ....ÆO¬X........
- 0000000180002040: D0 00 00 00 4C 20 00 00 4C 06 00 00 00 00 00 00 D...L ..L.......
- ### from dumpbin /EXPORTS
- ordinal hint RVA name
- 1 0 0000102A usingDoubleQuote
- 2 1 00001000 usingSingleQuote
- ### from dumpbin /DISASM
- 0000000180001000: 48 83 EC 48 sub rsp,48h
- 0000000180001004: 0F 10 05 0E 10 00 movups xmm0,xmmword ptr [0000000180002019h]
- 00
- 000000018000100B: 48 8D 4C 24 20 lea rcx,[rsp+20h]
- 0000000180001010: 0F 11 41 09 movups xmmword ptr [rcx+9],xmm0
- 0000000180001014: 0F 28 05 F5 0F 00 movaps xmm0,xmmword ptr [0000000180002010h]
- 00
- 000000018000101B: 0F 29 01 movaps xmmword ptr [rcx],xmm0
- 000000018000101E: FF 15 DC 0F 00 00 call qword ptr [0000000180002000h]
- 0000000180001024: 90 nop
- 0000000180001025: 48 83 C4 48 add rsp,48h
- 0000000180001029: C3 ret
- 000000018000102A: 48 83 EC 48 sub rsp,48h
- 000000018000102E: 0F 10 05 E4 0F 00 movups xmm0,xmmword ptr [0000000180002019h]
- 00
- 0000000180001035: 48 8D 4C 24 20 lea rcx,[rsp+20h]
- 000000018000103A: 0F 11 41 09 movups xmmword ptr [rcx+9],xmm0
- 000000018000103E: 0F 28 05 CB 0F 00 movaps xmm0,xmmword ptr [0000000180002010h]
- 00
- 0000000180001045: 0F 29 01 movaps xmmword ptr [rcx],xmm0
- 0000000180001048: FF 15 B2 0F 00 00 call qword ptr [0000000180002000h]
- 000000018000104E: 90 nop
- 000000018000104F: 48 83 C4 48 add rsp,48h
- 0000000180001053: C3 ret
- ################# SOURCE #################
- #if defined(A)
- extern "C" {
- __declspec(dllimport) void x(char (*c)[25]);
- __declspec(dllexport) void usingSingleQuote() {
- char strKernel32[] = { 'k',0,'e',0,'r',0,'n',0,'e',0,'l',0,'3',0,'2',0,'.',0,'d',0,'l',0,'l',0,0 };
- x(&strKernel32);
- }
- __declspec(dllexport) void usingDoubleQuote() {
- char strKernel32[] = "k\0e\0r\0n\0e\0l\0\x33\0\x32\0.\0d\0l\0l\0";
- x(&strKernel32);
- }
- void _DllMainCRTStartup() {}
- }
- #endif
- #if defined(B)
- extern "C" {
- __declspec(dllexport) void x(char (*c)[25]) {}
- }
- #endif
- /* VS2015
- %VSINSTALLDIR%VC\vcvarsall.bat amd64
- cl /EHsc /c tmp.cpp /Fo:tmp2.obj /DB
- link /DLL tmp2.obj
- clang.exe -target x86_64-pc-windows-msvc -Os -c -o clang.o tmp.cpp -DA
- link /DLL clang.o tmp2.lib kernel32.lib
- cl /Os /EHsc /c tmp.cpp /Fo:cl.obj /DA
- link /DLL cl.obj tmp2.lib kernel32.lib
- */
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement