Q. Why is alignment important when accessing an executable file?

View solution

Q. What is an RVA?

View solution

Q. What is the difference between section alignment and file alignment?

View solution

Q. What are DLLs?

View solution

Q. What is the benefit of using DLLs?

View solution

Q. How do DLLs differ from build-time static libraries?

View solution

Q. What happens when two executables are statically linked to the same library?

View solution

Q. What is a DLL?

View solution

Q. What is the benefit of using DLLs in a program?

View solution

Q. What is the difference between static linking and runtime linking?

View solution

Q. Which linking method is typically employed by most application programs?

View solution

Q. Why is static linking easier to deal with from a reversing standpoint?

View solution

Q. What is the purpose of the DOS header in a PE file?

View solution

Q. What does the e_lfanew member in the DOS header point to?

View solution

Q. Where are most of the interesting contents in a PE header stored?

View solution

Q. What is the purpose of the DataDirectory in a PE header?

View solution

Q. Are pointers within the PE header actual pointers or RVAs?

View solution

Q. What are the mechanisms that enable the dynamic linking process of executables?

View solution

Q. What is the purpose of the import table in a module?

View solution

Q. How are the addresses of the imported functions found during runtime?

View solution