Posted February 22, 200817 yr http://www.cs.ucsb.edu/~nomed/docs/pecoff.html awesome stuff, each part nicely explained. I am making a packer based on this . If this has been posted before sorry, didn't see anything.
February 22, 200817 yr you might want to check msdn and get the updated doc.. the one you list is from 1999 ;pand any cracker/reverser should know the pe32 / pe32+ format anyway...other links that might be useful to those starting off...http://msdn.microsoft.com/msdnmag/issues/02/02/PE/http://en.wikipedia.org/wiki/Portable_Executablethe latest microsoft documentation (also details 64 bit if i remember right..)http://www.microsoft.com/whdc/system/platf...are/PECOFF.mspxand the direct download link of the above...http://www.microsoft.com/whdc/system/platf.../PECOFFdwn.mspx?or http://download.microsoft.com/download/9/c...a/pecoff_v8.docone of those should work... Edited February 22, 200817 yr by evlncrn8
February 22, 200817 yr There are plenty of PE related articles at the following link that should be of interest to you including the latest PECOFF, version 8 I think it is:http://www.tuts4you.com/download.php?list.30Ted.
February 22, 200817 yr Author you might want to check msdn and get the updated doc.. the one you list is from 1999 ;pand any cracker/reverser should know the pe32 format anyway...http://support.microsoft.com/kb/65122Thats all I can find on msdn about it...
February 23, 200817 yr Author well my links are from today, so i guess you didnt search msdn too well... Well I finally found those on msdn just didn't know what to search for at first, searched for the title of the html I posted above and found a lot .
November 28, 201014 yr Microsoft Portable Executable and Common Object File Format SpecificationUpdated: October 5, 2010This specification describes the structure of executable (image) files and object files under the Windows family of operating systems. These files are referred to as Portable Executable (PE) and Common Object File Format (COFF) files, respectively.Note: This document is provided to aid in the development of tools and applications for Windows but is not guaranteed to be a complete specification in all respects. Microsoft reserves the right to alter this document without notice.This revision of the Microsoft Portable Executable and Common Object File Format Specificationreplaces Revision 6.0 of this specification.This information applies for the following operating systems:Windows 7Windows Server 2008Windows VistaWindows Server 2003Windows XPWindows 2000What's New in Revision 8.2:Added ARMv7 platform information; corrected error in the .rsrc section to properly reflect the order of resource data entries and resource directory stringspecoff8.2
Create an account or sign in to comment