![]() ![]() I found a hint in one of the commits which suggests this:Īdditionally I performed an executable analysis (detect compiler versions via magics/heuristics) using virustotal:Ġ194:trace:module:load_dll looking for L"PSAPI.DLL" in L"Z:\\home\\focht\\wine-apps\\圆4dbg\\release\\x32 C:\\windows\\system32 C:\\windows\\system C:\\windows. To use run-time dynamic linking, load Psapi.dll.įrom my investigation I deduced that starting with _20-57 snapshot (contains TitanEngine dll update) the project including subprojects (TitanEngine) was built with a newer MS Visual Studio 2013 which uses PSAPI_VERSION=2 by default. TARGETLIBS macro and compile the program with -DPSAPI_VERSION=1. To ensure correct resolution of symbols, add Psapi.lib to the Programs that must run on earlier versions of Windows as well as Windows 7 and later versions should alwaysĬall this function as GetProcessImageFileName. In Psapi.h and exported in Psapi.lib and Psapi.dll as a wrapper that calls K32GetProcessImageFileName. If PSAPI_VERSION is 1, this function is defined as GetProcessImageFileName If PSAPI_VERSION is 2 or greater, this function is defined as K32GetProcessImageFileName in Psapi.h and exported The PSAPI version number affects the name used to call the function and the library that a program must load. ![]() Starting with Windows 7 and Windows Server 2008 R2, Psapi.h establishes version numbers for the PSAPI functions. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |