Article View: borland.public.delphi.nativeapi
Article #12092Re: Execute file from memory
From: John Herbster TeamB
Date: Mon, 25 Nov 2002 16:25
Date: Mon, 25 Nov 2002 16:25
6 lines
1213 bytes
1213 bytes
"ArcAngel" <arc@angel.nospam.com> wrote > ... load an EXE into [memory] (that may be encrypted) > and run it from memory! ... If the EXE file is encrypted, how would you or the OS know where the entry point is? Rgds, JohnH
Technical Details
Message-ID:
<3de24ef7$1@newsgroups.borland.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-01!sn-xit-08!supernews.com!newsfeed.news2me.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed1.cidera.com!Cidera!news.uni-x.net!newsgroups.borland.com!not-for-mailReferences:
<3de239af$1@newsgroups.borland.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f94dd,eb1786436ac8b934 X-Google-Attributes: gidf94dd,public X-Google-ArrivalTime: 2002-11-25 09:15:50 PST From: "John Herbster \(TeamB\)" <herb-sci at novus-tele.net> Newsgroups: borland.public.delphi.nativeapi References: <3de239af$1@newsgroups.borland.com> Subject: Re: Execute file from memory Date: Mon, 25 Nov 2002 08:25:18 -0800 Lines: 8 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 NNTP-Posting-Host: 64.69.92.32 Message-ID: <3de24ef7$1@newsgroups.borland.com> X-Trace: newsgroups.borland.com 1038241527 64.69.92.32 (25 Nov 2002 08:25:27 -0800) Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-01!sn-xit-08!supernews.com!newsfeed.news2me.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed1.cidera.com!Cidera!news.uni-x.net!newsgroups.borland.com!not-for-mail