high6 Posted February 22, 2008 Posted February 22, 2008 http://www.cs.ucsb.edu/~nomed/docs/pecoff.html awesome stuff, each part nicely explained. I am making a packer based on this . If this has been posted before sorry, didn't see anything.
evlncrn8 Posted February 22, 2008 Posted February 22, 2008 (edited) you might want to check msdn and get the updated doc.. the one you list is from 1999 ;pand any cracker/reverser should know the pe32 / pe32+ format anyway...other links that might be useful to those starting off...http://msdn.microsoft.com/msdnmag/issues/02/02/PE/http://en.wikipedia.org/wiki/Portable_Executablethe latest microsoft documentation (also details 64 bit if i remember right..)http://www.microsoft.com/whdc/system/platf...are/PECOFF.mspxand the direct download link of the above...http://www.microsoft.com/whdc/system/platf.../PECOFFdwn.mspx?or http://download.microsoft.com/download/9/c...a/pecoff_v8.docone of those should work... Edited February 22, 2008 by evlncrn8
Teddy Rogers Posted February 22, 2008 Posted February 22, 2008 There are plenty of PE related articles at the following link that should be of interest to you including the latest PECOFF, version 8 I think it is:http://www.tuts4you.com/download.php?list.30Ted.
high6 Posted February 22, 2008 Author Posted February 22, 2008 you might want to check msdn and get the updated doc.. the one you list is from 1999 ;pand any cracker/reverser should know the pe32 format anyway...http://support.microsoft.com/kb/65122Thats all I can find on msdn about it...
evlncrn8 Posted February 23, 2008 Posted February 23, 2008 well my links are from today, so i guess you didnt search msdn too well...
high6 Posted February 23, 2008 Author Posted February 23, 2008 well my links are from today, so i guess you didnt search msdn too well... Well I finally found those on msdn just didn't know what to search for at first, searched for the title of the html I posted above and found a lot .
sirp Posted November 28, 2010 Posted November 28, 2010 Microsoft Portable Executable and Common Object File Format SpecificationUpdated: October 5, 2010This specification describes the structure of executable (image) files and object files under the Windows family of operating systems. These files are referred to as Portable Executable (PE) and Common Object File Format (COFF) files, respectively.Note: This document is provided to aid in the development of tools and applications for Windows but is not guaranteed to be a complete specification in all respects. Microsoft reserves the right to alter this document without notice.This revision of the Microsoft Portable Executable and Common Object File Format Specificationreplaces Revision 6.0 of this specification.This information applies for the following operating systems:Windows 7Windows Server 2008Windows VistaWindows Server 2003Windows XPWindows 2000What's New in Revision 8.2:Added ARMv7 platform information; corrected error in the .rsrc section to properly reflect the order of resource data entries and resource directory stringspecoff8.2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now