It seems that there are PE header flags that cause Windows to read entire executable to swap file when it is running from network or removable media (and do nothing for executables from local drives):
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP (0x0400)
IMAGE_FILE_NET_RUN_FROM_SWAP (0x0800)
I think these could be use useful for TC that is started from a network folder or USB stick, and I don't see any drawbacks. What do you think?
Set IMAGE_FILE_*_RUN_FROM_SWAP flags for TC
Moderators: white, Hacker, petermad, Stefan2
Set IMAGE_FILE_*_RUN_FROM_SWAP flags for TC
Last edited by MVV on 2020-11-06, 17:59 UTC, edited 1 time in total.
- ghisler(Author)
- Site Admin
- Posts: 48083
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
Re: Set IMAGE_FILE_*_RUN_FROM_SWAP flags for TC
Sounds useful - any drawback, like not starting from Windows 9x or so?
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com
Re: Set IMAGE_FILE_*_RUN_FROM_SWAP flags for TC
I think you should try them to see, I haven't used them.