Author Topic: PE_VIEWER 2048 BYTES  (Read 2585 times)

xiahan

  • Guest
PE_VIEWER 2048 BYTES
« on: June 18, 2012, 02:34:08 AM »
back to June 8, i ask people for the PE_COFF specification,till now, it's already 10 days
i just have made a simple PE viewer, which read a exe file,and format them into a
txt file
the output txt file is like this
00000490  40 00 F6 05 2A AF 40 00 04 75 18 41 BA 7F A9 40
000004A0  00 F6 05 2A AF 40 00 02 75 09 83 3D 08 90 40 00
000004B0  01 76 14 6A 00 68 34 90 40 00 51 52 FF 35 3C 90

later, i am going to do some parsing on these origin data to extract useful info

P.S
Code: [Select]
TEST_FILE_NAME DB 'C:\TEST.EXE',0
      TEMP_FILE DB 'C:\HEX.TXT',0
so you should rename the target file to 'test.exe',and the output txt file is resides in 'c:\hex.txt', a little more, the program need to be run under console

qWord

  • Member
  • *****
  • Posts: 1471
  • The base type of a type is the type itself
    • SmplMath macros
Re: PE_VIEWER 2048 BYTES
« Reply #1 on: June 18, 2012, 02:52:19 AM »
impressiv :biggrin:
MREAL macros - when you need floating point arithmetic while assembling!

xiahan

  • Guest
Re: PE_VIEWER 2048 BYTES
« Reply #2 on: June 18, 2012, 03:05:11 AM »

dedndave

  • Member
  • *****
  • Posts: 8751
  • Still using Abacus 2.0
    • DednDave
Re: PE_VIEWER 2048 BYTES
« Reply #3 on: June 18, 2012, 03:45:18 AM »
 :t

xiahan

  • Guest
Re: PE_VIEWER 2048 BYTES
« Reply #4 on: June 18, 2012, 04:00:10 AM »