The MASM Forum

General => The Laboratory => Topic started by: xiahan on June 18, 2012, 02:34:08 AM

Title: PE_VIEWER 2048 BYTES
Post by: xiahan on June 18, 2012, 02:34:08 AM
back to June 8, i ask people for the PE_COFF specification,till now, it's already 10 days
i just have made a simple PE viewer, which read a exe file,and format them into a
txt file
the output txt file is like this
00000490  40 00 F6 05 2A AF 40 00 04 75 18 41 BA 7F A9 40
000004A0  00 F6 05 2A AF 40 00 02 75 09 83 3D 08 90 40 00
000004B0  01 76 14 6A 00 68 34 90 40 00 51 52 FF 35 3C 90

later, i am going to do some parsing on these origin data to extract useful info

P.S
Code: [Select]
TEST_FILE_NAME DB 'C:\TEST.EXE',0
      TEMP_FILE DB 'C:\HEX.TXT',0
so you should rename the target file to 'test.exe',and the output txt file is resides in 'c:\hex.txt', a little more, the program need to be run under console
Title: Re: PE_VIEWER 2048 BYTES
Post by: qWord on June 18, 2012, 02:52:19 AM
impressiv :biggrin:
Title: Re: PE_VIEWER 2048 BYTES
Post by: xiahan on June 18, 2012, 03:05:11 AM
impressiv :biggrin:
thanks!
Title: Re: PE_VIEWER 2048 BYTES
Post by: dedndave on June 18, 2012, 03:45:18 AM
 :t
Title: Re: PE_VIEWER 2048 BYTES
Post by: xiahan on June 18, 2012, 04:00:10 AM
:t

with your help!