3 ms·
Another reason could be that it has dependencies that link to specific addresses in the exe. It's very peculiar that they made the effort to keep all the origin
by dtech 9y ago
Another reason could be that it has dependencies that link to specific addresses in the exe. It's very peculiar that they made the effort to keep all the original adresses.
- breakingcups 9y agoThat's a really good point.
- bearbearbear 9y agoThe most likely reason is there's a heavy handed government agency that relies on all the base addresses to be the same, who buys lots of Microsoft licenses.
- ggg9990 9y agoYes, the NSA is surveilling the populace 24/7 through Microsoft Equation Editor.
- ajnin 9y agoIt's keeping the adresses that requires the least effort, changing them would have implied to also change all calls and jumps in the rest of the code, which could mean a very large number of addresses to change.
- nostoc 9y agoIt's not an effort, it's probably a side effect of simply patching the binary. If you can't rebuild it, you have to manually edit it, and when you do that you can't really change the addresses, not without a lot of headache.