From: Matteo Pelati [matteo@dolce.it]
Sent: Monday, October 23, 2000 7:25 AM
To: NT Developers Interest List
Subject: [ntdev] Re: Figuring out executable file format...
Check out these links:
 
http://pr0n.newhackcity.net/~sd/pewrap.html
http://www.csn.ul.ie/~caolan/publink/winresdump/winresdump/doc/pefile.html
http://www.csn.ul.ie/~caolan/publink/winresdump/winresdump/doc/msdn_peeringpe.html
 
Also I have the PE specs in pdf format if you want me to send them to you
 
- Matt

 

 
----- Original Message -----
From: "Marko Bozikovic" <redbyron@fly.srk.fer.hr>
To: "NT Developers Interest List" <ntdev@lists.osr.com>
Sent: Monday, October 23, 2000 12:52 PM
Subject: [ntdev] Figuring out executable file format...

> Hi!
>
> I'm trying to figure out the windows executable file format in order to get
> file dependencies (like Dependency walker adn dumpbin do) of an executable
> file.
>
> I have found two 'file dump' examples in MSDN, but they don't seem to get the
> information in the same way dumpbin does. Both these examples look for .idata
> section to get the import table. If a file doesn't have it, they don't print
> it. On the other hand, dumpbin always prints import table, even if a file
> doesn't have .idata section.
>
> Where can I find executable file format explained? I have tried searching
> MSDN, but no luck.
>
> TIA,
> --
> Marko
> ICQ:  5990814
>
> "It's Chin Qu's deadly sword. I'll have to use Billy's Jeet Kun Do style."
>               -- Bobby Lo
>
>
> ---
> You are currently subscribed to ntdev as:
matteo@dolce.it
> To unsubscribe send a blank email to leave-ntdev-247T@lists.osr.com
>
>