Skip to main content
3 votes
Accepted

Does a Windows MSI/installer function similarly to a portable file in PE format?

Simplified Comparison Table Below is simplified comparison between MSI (Microsoft Installer), Portable Executables (PE), and EXE Installers Property MSI (Microsoft Installer) Portable Executables (PE)...
CPUKiller's user avatar
2 votes

Does a Windows MSI/installer function similarly to a portable file in PE format?

.msi files are based on the OLE file format and has d0cf11e0 header as opposed to MZ header for a PE file format. you could use a tool such as oledump (oledump) to parse it, or a tool called orca (...
rotem.salinas's user avatar
1 vote
Accepted

WinDbg command to retrieve TTBR registers for Aarch64?

Short answer is, AFAIK there isn't currently a way to do that. I think it might be implemented in the future. You would expect that arm64 should have a command like rdmsr 0xc0000082 to read these ...
rotem.salinas's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible