HackerTrans
トップ新着トレンドコメント過去質問紹介求人

CSm1n

no profile record

コメント

CSm1n
·5 か月前·議論
Notepad was just a wrapper around some default win32 controls. Judging alone by exe size is not right, although probably a “statically linked” notepad would still be smaller than emacs
CSm1n
·6 か月前·議論
> No, you can't. When you use 7-era toolchain (e.g. VS 2012) it sets the minimum client version in PE header to Vista, not XP much less 2k.

Yes, you can! There are even multiple Windows 10 era toolchains that officially support XP. VS 2017 was the last release that could build XP binaries.
CSm1n
·2 年前·議論
It is a flag that says whether the loader data is initialized or not.

The layout of PEB_LDR_DATA “leaked” long time ago in public PDBs.

More context: It has nothing to do with debugging. However, if you attach to the process early enough, you might see the flag as 0 and eventually it would switch to 1. That is probably what threw him off.