Timeline for Check if exe is 64-bit
Current License: CC BY-SA 3.0
10 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Apr 13, 2017 at 12:49 | history | edited | CommunityBot |
replaced http://reverseengineering.stackexchange.com/ with https://reverseengineering.stackexchange.com/
|
|
S Nov 21, 2015 at 8:52 | history | suggested | Justin Goldberg | CC BY-SA 3.0 |
corrected openwatcom link to point to ftp
|
Nov 20, 2015 at 16:42 | review | Suggested edits | |||
S Nov 21, 2015 at 8:52 | |||||
Feb 12, 2015 at 14:34 | comment | added | SerG |
Where do you find 0xaa64 - ARMv8 in 64-bit mode ? I have not such #define in winnt.h .
|
|
Aug 25, 2014 at 21:45 | comment | added | user1354557 |
To quickly find the target machine value: Take the DWORD at offset 0x3C. Add four to this value. That is the offset of the Machine WORD. (Both are little endian)
|
|
Aug 17, 2014 at 11:29 | vote | accept | ST3 | ||
Aug 8, 2014 at 14:47 | comment | added | zamnuts | For a visual reference, image showing the location of the PE header with 0x8664 (highlighted): i.imgur.com/yHvcgdn.png (notepad++ hex-editor plugin) | |
Aug 8, 2014 at 11:08 | history | edited | ST3 | CC BY-SA 3.0 |
added 307 characters in body
|
Aug 8, 2014 at 10:55 | comment | added | Bob |
Don't forget 0x0200 (Itanium). That would be IA-64, as opposed to x86-64 (AMD64). There's a couple more "64-bit" machine types possible, but you're very unlikely to find them in the wild (0x0284 is the 64-bit Alpha AXP, from the 1999 documentation, and not supported by Windows after NT4/2000RC).
|
|
Aug 8, 2014 at 8:42 | history | answered | ST3 | CC BY-SA 3.0 |