Skip to content
Branch: master
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
CoffHeader.cpp
CoffHeader.h
DosHeader.cpp
DosHeader.h
Export.cpp
Export.h
Import.cpp
Import.h
OptionalHeader.cpp
OptionalHeader.h
PeCommon.cpp
PeCommon.h
PeErrors.h
PeFile.cpp
PeFile.h
PeLib.cpp
PeLib.sln
PeLib.vcxproj
PeLib.vcxproj.filters
README.md
ReadMe.txt
Section.cpp
Section.h
TODO.txt
stdafx.cpp
stdafx.h
targetver.h

README.md

BRIEF LOOK AT PE FILE

        .----------------------.
        |                      |
        |    Other stuff not   |
        |    touched in this   |
        |    program           |
        |                      |
        |----------------------|
        |                      |
        | Various Section like |
        |        .....         |
        |        .....         |
.------>|       .reloc         |
| .---->|       .idata         |
| | .-->|       .data          |
| | | .>|       .text          |
| | | | |----------------------|
'-|-|-|-|                      | <--- Each entry in section table have pointer
  '-|-|-|         Section      |      offsets to actual sections
    '-|-|     Header or Table  |
      '-|                      |      ---.----------------.
        |----------------------|-----/   |   PE Optional  |  1) ImageBase
        |                      |         |    Header      |
        |                      |         |                |
        |        NT Headers    |         |----------------|
        |                      |         |     COFF/PE    |  1) NumberOfSections
        |                      |         |   Header Info  |  2) SizeOfOptionalHeader
        |----------------------|-----    |----------------|
        |         UNUSED       |     \   |   PE Signature |
        |----------------------|      ---'----------------'
        |      MS-DOS stub     |
        |----------------------|
        |         UNUSED       |
        |----------------------|
        |     MS-DOS Header    | <-- Here at 0x3c location we have the offset of NT Header
        '----------------------'
You can’t perform that action at this time.