Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [windows-8]

Refers to the version 8 of the Windows operating systems designed by Microsoft.

1
vote
0answers
471 views

Why is ASLR not activated though IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE is set?

Even a minimal console Delphi program that has IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE set in its PE image does not use ASLR. GetProcessMitigationPolicy() returns a PROCESS_MITIGATION_ASLR_POLICY of 0. ...
6
votes
1answer
420 views

Difference between Win7 and Win8 PE loader?

Is it known what the differences between the Window 7 and Windows 8 PE loader are? I'm trying to hand-craft a simple executable PE image file. It runs well in Windows 7, but is rejected by Windows 8....
1
vote
1answer
158 views

How the signature level set to the process in Windows 8?

From this blog article: Windows PKI Internals (Signing Levels, Scenarios, Root Keys, EKUs & Runtime Signers). Windows 8 instituted the Signing Level, also sometimes referred to as the ...
1
vote
0answers
352 views

How to debug under Olly the Windows 8.1 Store apps? [closed]

Ive tried to attach to some windows store app. It seems like there is no way since when OllyDebugger stopped reacting, showing the 'Loading .udd data' message. If I re-launch olly, it reacts the same ...
0
votes
1answer
199 views

NdrClientCall2 fails with STATUS_OBJECT_NAME_NOT_FOUND

I was debugging a Windows Store app, wwahost.exe does a NdrClientCall2 - TWINAPI!PsmApp_StubDesc. psmsrv.dll registered the endpoint by dcomlaunch svchost.exe. What would be reasons of a ...
3
votes
1answer
169 views

Different offsets in different Windows versions

I loaded a file into OllyDbg, and on my Windows 8, I see offsets of this format '7780XXXX': 7780DE50 7780DE52 ... On my XP machine it goes like this 0041XXXX: 004171A2 004171A4 ... Why is there a ...
7
votes
0answers
751 views

Red Alert 2 Windows 8 DirectDraw compatibility

The game Red Alert 2 runs on Windows 8, but as soon as I inject a DLL (via ddraw.dll or an extra DLL) it stops drawing buttons on the main menu. With the DLL it still work fine in windowed mode and it ...
7
votes
1answer
3k views

Getting IDAPro to analyse part of memory as PE-File

I am using Qemu with its internal GDB server to attach IDA Pro to an instance of Windows 8 x64. There are some problems to solve, because when I am connecting to the GDB server, I am just seeing a ...
6
votes
1answer
557 views

Can I set entry point at code in PE headers?

If I set something like 0x00000040 (my code is located at this address), then the program crashes with this error: The application was unable to start correctly (0xc000007b) But if I jmp from the ...
13
votes
5answers
2k views

Decryping TLS packets between Windows 8 apps and Azure

In Windows Store application development for Windows 8, there is a class called remoteSettings that lets a developer store batches of data so that the user will have access to it across several ...