Q. How do DLLs differ from build-time static libraries?

View solution

Q. What happens when two executables are statically linked to the same library?

View solution

Q. What is a DLL?

View solution

Q. What is the benefit of using DLLs in a program?

View solution

Q. What is the difference between static linking and runtime linking?

View solution

Q. Which linking method is typically employed by most application programs?

View solution

Q. Why is static linking easier to deal with from a reversing standpoint?

View solution

Q. What is the purpose of the DOS header in a PE file?

View solution

Q. What does the e_lfanew member in the DOS header point to?

View solution

Q. Where are most of the interesting contents in a PE header stored?

View solution

Q. What is the purpose of the DataDirectory in a PE header?

View solution

Q. Are pointers within the PE header actual pointers or RVAs?

View solution

Q. What are the mechanisms that enable the dynamic linking process of executables?

View solution

Q. What is the purpose of the import table in a module?

View solution

Q. How are the addresses of the imported functions found during runtime?

View solution

Q. What is the purpose of the IAT in a module?

View solution

Q. What does the linker do to resolve each entry in the IAT?

View solution

Q. What are the Optional Directories in the Portable Executable File Format?

View solution

Q. What is the Export Table in the Portable Executable File Format?

View solution

Q. What is the Import Table in the Portable Executable File Format?

View solution