Is there a way to identify if 3rd Party software loaded on my machine is Large Address Aware LAA

Question

I know how to make my own applications Large Address Aware (LAA)

Is there a way to identify if 3rd party software (Excel, Notepad++, etc.) loaded on my machine is LAA or not?

Can I take a dump from Task Manager and interrogate it somehow?

Answer 1

是的，大地址识别EXE在PE头中设置了特定标志。要检查此标志，您可以使用Windows SDK中包含的命令行工具dumpbin。

https://msdn.microsoft.com/en-us/library/756as972.aspx

dumpbin /header file.exe可能就是你想要的。