Guest User

Untitled

a guest
Aug 18th, 2018
107
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.83 KB | None | 0 0
  1. How to say if a binary is GS compiled or not, and without symbols?
  2. >dumpbin /loadconfig test.exe
  3.  
  4. Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
  5. Copyright (C) Microsoft Corporation. All rights reserved.
  6.  
  7.  
  8. Dump of file test.exe
  9.  
  10. File Type: EXECUTABLE IMAGE
  11.  
  12. Section contains the following load config:
  13.  
  14. 00000048 size
  15. 0 time date stamp
  16. 0.00 Version
  17. 0 GlobalFlags Clear
  18. 0 GlobalFlags Set
  19. 0 Critical Section Default Timeout
  20. 0 Decommit Free Block Threshold
  21. 0 Decommit Total Free Threshold
  22. 00000000 Lock Prefix Table
  23. 0 Maximum Allocation Size
  24. 0 Virtual Memory Threshold
  25. 0 Process Heap Flags
  26. 0 Process Affinity Mask
  27. 0 CSD Version
  28. 0000 Reserved
  29. 00000000 Edit list
  30. > 00408000 Security Cookie <
  31. 00407840 Safe Exception Handler Table
  32. 3 Safe Exception Handler Count
  33.  
  34. Safe Exception Handler Table
  35.  
  36. Address
  37. --------
  38. 004025D0
  39. 00404200
  40. 00405160
  41.  
  42. ... [function entry]
  43. .text:01005188 mov eax, ___security_cookie
  44. .text:0100518D mov [ebp+var_1C], eax
  45. ... [function body]
  46. .text:010057F6 mov ecx, [ebp+var_1C]
  47. .text:010057F9 call sub_1007147
  48. ... [function exit]
  49.  
  50. .text:01007147 cmp ecx, ___security_cookie
  51. .text:0100714D jnz short loc_1007158
  52. .text:0100714F test ecx, 0FFFF0000h
  53. .text:01007155 jnz short loc_1007158
  54. .text:01007157 retn
  55.  
  56. .data:01009600 dword_1009600 dd 0FFFF44BFh
  57. .data:01009604 ___security_cookie dd 0BB40h
Add Comment
Please, Sign In to add comment