Skip to content

Instantly share code, notes, and snippets.

@the-nose-knows
Created May 3, 2017 21:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save the-nose-knows/b08a188665c3fd3d78d04a0ec6ce89c0 to your computer and use it in GitHub Desktop.
Save the-nose-knows/b08a188665c3fd3d78d04a0ec6ce89c0 to your computer and use it in GitHub Desktop.
+ addy 0x000000a578d2f3a8 {0x0000000000001000} unsigned __int64 *
argc 0x00000002 int
+ argv 0x0000029771432410 {0x0000029771432428 "C:\\Users\\TheUser\\documents\\visual studio 2017\\Projects\\load_pe\\x64\\Debug\\load_pe.exe"} char * *
coverted_base_address 0x0000029771370000 unsigned __int64
data_directory_optional_header_offset 0x0000000000000070 unsigned __int64
direct_access_size_stack 0x0000000000001000 unsigned __int64
error_check 0x00000000 int
+ filesystem_image {_Mystr=L"C:\\pathToFile\\some_test.exe" } std::experimental::filesystem::v1::path
+ image_directory "C:\\pathToFile" std::basic_string<char,std::char_traits<char>,std::allocator<char> >
image_loaded true bool
+ image_name "some_test" std::basic_string<char,std::char_traits<char>,std::allocator<char> >
+ image_name_and_extension "some_test.exe" std::basic_string<char,std::char_traits<char>,std::allocator<char> >
+ image_to_load "C:\\pathToFile\\some_test.exe" std::basic_string<char,std::char_traits<char>,std::allocator<char> >
is32bit false bool
is64bit true bool
+ loaded_image {ModuleName=0x0000029771434160 "C:\\pathToFile\\some_test.exe" ...} _LOADED_IMAGE
magic_number 0x0000020b int
+ module_base_address 0x0000029771370000 "MZ" unsigned char *
+ p_loaded_image 0x000000a578d2f1f0 {ModuleName=0x0000029771434160 "C:\\pathToFile\\some_test.exe" ...} _LOADED_IMAGE *
size_stack_commit_offset 0x0000000000000050 unsigned __int64
sum_for_size_stack 0x00000297713700d8 unsigned __int64
validFile true bool
windows_optional_header_offset 0x0000000000000018 unsigned __int64
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment