root 9fd8422d8f Fill the stub-authoring, import-mechanism and unwind gaps ...

injection-and-hooking.md gains where a stub can live, the jump encodings and the
64-bit distance problem, what the stub must preserve, the order the writes land in,
and how the bytes are produced and checked before use.

recon.md gains an import-cluster table: which API sets name which mechanism, and
which reference continues each one.

static-analysis.md reads the x64 exception directory as a function table, with the
three validity checks, the unwind record's contents, and the three limits. compiler-
fingerprints.md points at it.

dotnet-decompilation.md loses a product-name-with-version literal that the leak scan
reports as a strong finding once the file is tracked.

2026-10-24 15:35:36 +08:00

..

exe-reverse

Fill the stub-authoring, import-mechanism and unwind gaps

2026-10-24 15:35:36 +08:00