mirror of
https://codeberg.org/reverse-skill-lab/exe-reverse
synced 2026-11-15 21:24:19 +08:00
references/crt-startup-and-main.md covers what runs before main: the entry symbols the linker places, the startup order under VS2015 and later, the VC++ 6.0 prologue, __chkesp and SEH tells in 32-bit builds, the /GS cookie construction, and the procedure for reaching main in a stripped image. assembly-idioms.md gains two sections: structure layout and stride (pack arithmetic, by-value copies, hidden return pointers, two-dimensional strides) and dispatch shapes (comparison chain, address table, offset table, binary tree), with the case set recovered from the bounds check rather than from quoted thresholds. Register the file in both symptom tables, the routing index, the coverage and route-inventory tables and the evidence note. The startup shapes come from a public tutorial corpus and are graded unverified; only the call into main, observed in a run, would promote them.