| Crates.io | anonlink |
| lib.rs | anonlink |
| version | 0.1.4 |
| created_at | 2022-09-19 15:08:45.895735+00 |
| updated_at | 2024-09-09 09:40:58.524871+00 |
| description | Command line tool to automatically patch link.exe to remove Rich PE Header |
| homepage | |
| repository | https://github.com/StackOverflowExcept1on/anonlink |
| max_upload_size | |
| id | 669195 |
| size | 26,323 |
Command line tool to automatically patch link.exe to remove Rich PE Header
TL;DR: when you building exe file with MSVC toolchain, Microsoft leaks some info about your development tools, such as version of compiler and number of C/C++ source files
For more advanced users: The Undocumented Microsoft "Rich" Header
cargo install anonlink
cargo build --release
:: run as administrator!
cargo run --release
linker path: C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Tools\MSVC\14.41.34120\bin\Hostx64\x64\link.exe
Found call instruction at address 140051A96
Found add instruction at address 140051AAA
Patching bytes [03, CF] => [90, 90]