PE map and unmap ( virtual format and raw format)

[Aldhard Oswine]

Is there any good article/paper/post about PE mapping and/or unmapping?

[havanacj13]

http://reversingproject.info/wp-content/uploads/2009/05/an_in-depth_look_into_the_win32_portable_executable_file_format_part_1.pdf

http://reversingproject.info/wp-content/uploads/2009/05/an_in-depth_look_into_the_win32_portable_executable_file_format_part_2.pdf

An older article from Matt Pietrek:

https://msdn.microsoft.com/en-us/library/ms809762.aspx

[Teddy Rogers]

Have you checked out the main page on this site?

https://tuts4you.com/download.php?list.30

Ted.

[Aldhard Oswine]

Ted, Thank you,
"Portable Executable File Format - A Reverse Engineer View.PDF" is very helpful.