I know there are many sources for PE file format specifications on the web, but thought someone might like to read a current rehash: MSDN Magazine has an article in the Feb2002 issue by Matt Pietrek. It's is very thorough, but only Part 1 - just breaks the ice with a general overview of how the file format works. So there will be more info to come - Part 2 should be the juicey bits. Pietrek states he will be going over all the common sections and data structures.
Posted on 2002-01-22 20:34:53 by bitRAKE
This sounds very nice - will it be available online and for non-subscribers?
(Sorry if I'm a bit ignorant to a lot of microsoft things - but their
website is a mess).
Posted on 2002-01-22 20:37:45 by f0dder
Silly me, didn't even look on the web site:
http://msdn.microsoft.com/msdnmag/issues/02/02/PE/PE.asp

...also try Matt's web site - the home of some interesting things:
http://www.wheaty.net
Posted on 2002-01-22 20:40:37 by bitRAKE
hey bitRake, do you know if the MSDN Mag content is in full on MSDN's site?

Wondering if its worth subscribing to the magazine. If its all on their site then I'm happy reading it there

thanx
Posted on 2002-01-22 21:11:07 by Rockinronstar
It's a trade off really:
- In the mag you get these lovely advertisments. :(
- Online you have the source code. :)

I read away from the screen - else I'd be reading online, too.
To answer your question: more than everything is online.
Posted on 2002-01-22 21:40:18 by bitRAKE
Wow... (I know Kong-Fu!) ~ Matrix spoof :grin:


Thanx bitRAKE that was a very informative artical. Really helped put the pieces together with some issues filled under "???? :confused: ????" in my head. Can't say im ready to tear apart exe's, but perhaps when Part 2 comes out.

(( If you know of any other interesting acticals, feel free to link them :grin: . I side with f0dder, the w/site is a nightmare to stumble thru ))

Thanx again.
:alright:
NaN
Posted on 2002-01-22 22:21:52 by NaN
I've read a lot of Matt Pietrek's work, and have a lot of respect for it. He is accurate, and really knows his stuff. If you want to know about the internals of NT, he is your man. You can still get a lot of his older stuff by reading the 'Under the Hood' articles in the old issues of MSDN Mag.
Posted on 2002-01-23 00:52:30 by sluggy
For those who are interested, Part 2 of this very informative
article is availible. As expected, this part is juicier than the last:
http://msdn.microsoft.com/msdnmag/issues/02/03/PE2/PE2.asp
Posted on 2002-03-03 21:50:43 by bitRAKE
yep, very nice article indeed. i hope it's bug free (unlike other pe format descriptions i've come across :rolleyes: )
Posted on 2002-03-04 09:15:43 by Tola