Log in

View Full Version : Official PE specification, download here


dELTA
August 18th, 2003, 19:54
During all the years of discussions regarding finding information about the PE format, and during all my own searching efforts for it in the past, I cannot recall ever seeing any mention about the following official PE format specification document from Microsoft:

http://www.microsoft.com/whdc/hwdev/download/hardware/pecoff.pdf

It is 77 pages stuffed with detailed information of very high quality about the PE format. I don't think I ever saw a document of equal quality regarding the PE file format (not really sensational since it is after all the official specification, but anyway ).

Even though it is dated 1999, I doubt that it has been publicly available all the way since then, due to the lack of widespread knowledge of its existence.

Anyway, I recommend any reverser with self respect to download and study it.


dELTA

esther
August 18th, 2003, 21:36
Thanks fors the link

ps: you've forgot the hxxp

JimmyClif
August 18th, 2003, 21:40
Thanks for the link.

OHPen
August 19th, 2003, 10:30
Hi all,

delta you are right, the document is accessable since 1999, i downed it for about two years.

It helped me to make the biggest steps on coding my own PE-Tool. All the time i used only this one to increase my knowledge in the PE-Field.

Very good essay, READ IT guy's,

OHPen aka forsaken aka PiTcH_SiLoW

JimmyClif
August 22nd, 2003, 23:38
This is just a shot in the blue but you don't know where to find the 'official' COFF Library Archive format ( .lib ) specs besides:

http://giscenter.icc.ru:8082/scripts/WWWBinV.dll/ShowR?COFF_LIB.rfi

and

http://www.microsoft.com/msj/0498/hood0498.aspx

dELTA
August 23rd, 2003, 20:23
I've got no idea, sorry. Anyone else?

hobferret
September 15th, 2003, 10:27
Good morning everyone

Just found this topic but could not get it via dELTA's link - so if anyone is interested it now resides at:-

http://www.microsoft.com/whdc/hwdev/hardware/PECOFF.mspx



/hobferret

cyberheg
September 16th, 2003, 03:04
I'm pretty sure it's the same document that I've used for years which is availble in MSDN.

It it dated v6.0 which I'm sure matches with MS VC++ 6.0 becuase that was also released around that time. The msdn I have is also from 1999.

// CyberHeg