How to enable LARGEADDRESSAWARE?

The command to enable large address aware is as follows… EditBin /LARGEADDRESSAWARE NotePad.exe How to check if the above command worked or not? Run the above executable (in our case NotePad.exe) with DumpBin.exe. C:> DumpBin /Headers NotePad.exe FILE HEADER VALUES              14C machine (x86)                4 number of sections         4BA1DC16 time date stamp Thu […]
Continue reading…

 

List all API’s being used by a Windows App/Dll

Use dumpbin… Dumpbin /imports SomeDll.dll > APIList.txt Dumpbin /imports SomeExe.exe > APIList.txt So next time if you find some application that looks and works cool and you would like to know what all API’s that application is using, go ahead use dumpbin or Dependency walker( The first pane to the right list’s all those API’s […]
Continue reading…

 

Disassembling a dll or exe

Use dumpbin… // Disassemble a dll dumpbin /disasm SomeDll.dll > RedirectToSomeFile.asm // Disassemble an exe dumpbin /disasm SomeExe.exe > RedirectToSomeFile.asm Redirecting to a file, results in faster disassembling. Help for dumpbin displays the following information! Microsoft (R) COFF Binary File Dumper Version 6.00.8447 Copyright (C) Microsoft Corp 1992-1998. All rights reserved. usage: DUMPBIN [options] [files] […]
Continue reading…