View Full Version : Good books on PE execution and file structure?
dELTA
February 26th, 2001, 07:02
Is there anyone who can recommend some good books about the structure of PE files and the process of their execution?
I would like to get some real detailed knowledge about e.g. how the imports/exports work and are structured, and exactly how the sections and other PE-structure is designed.
I feel that a thorough knowledge about this is really good before being able to do some serious cracking work.
I know that the books by Matt Pietrek are recommended, but they aren't available anymore. :-( So does anyone have any suggestions about good book about this that can be found in the stores today?
Thanks!
Iceman
February 26th, 2001, 07:40
A good overview of PE files is available at MS;s WEB site. nad the file is up to date. Search MSDN online for it.
rot8
February 26th, 2001, 08:48
http://jump.to/ganz
Dokz section
dELTA
February 26th, 2001, 09:13
Over at MSDN I find one article from 1994 by Matt Pietrek, and one article that claims to "describe in detail the internal features of PE/COFF file formats and its parameters". But then the article just ends, without any real content!? I'm sure it's because I'm stupid, but could anyone please tell me how I get to the actual content of this article:
http://support.microsoft.com/support/kb/articles/Q121/4/60.asp
Any link to some other MSDN articles related to this subject, other than these two I mention here, would also be greatly appreciated.
Thanks!
MO`K
February 26th, 2001, 11:34
Chapter 9 -IIRC- Window32 systems programming secrets, Matt Pietrek.
It is there at ganz site. The chapter is very detailed, so prepare plenty of paper to print out, and walk around with for a day or two

BlackB
February 28th, 2001, 07:40
I noticed that downloading from the ganz site extremely slow. so i've uploaded the Pietrek book on my webspace.
http://users.belgacom.net/blackb/PietrekBook.zip
this will be a LOT faster
greets
BlackB
dELTA
February 28th, 2001, 14:45
Thanks BlackB, I noticed it was VERY slow, always stalled after just a few tens of kilobytes.
But I got it with a 3,5 hours Flashget session with 10 threads and 30 second timeouts anyway. :-) But I'm sure other people would like to download that excellent book anyway.
Clandestiny
March 1st, 2001, 18:18
Thanks BlackB,
I d/l the book from your site and it was quite fast :-)
Regards,
Clandestiny
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.