Executable File Format / Container

Microsoft

  • Section 2.3.1. Machine Types

Microsoft PE and COFF Specification
How to check if a binary is 32 or 64 bit on Windows?

Wikipedia

Portable Executable (PE)
Common Object File Format (COFF)
Executable and Linkable Format (ELF)
Mach object (Mach-O)

Ange Albertini (corkami.com)

github.com/angea/corkami
pics.corkami.com

wikibooks.org

x86 Disassembly
x86 Disassembly/Windows Executable Files
x86 Disassembly/Linux Executable Files

Compiler

Link Time Optimization

Understanding Windows Internal Call Structure
PeLib An open-source C++ library to modify PE files
The PE file format
PE Explorer: View, Edit, and Reverse Engineer EXE and DLL Files
PE Explorer Disassembler

MSYS2

$ pacman -S binutils
$ objdump -f /c/Program\ Files/Git/bin/git.exe

/c/Program Files/Git/bin/git.exe:     file format pei-x86-64
architecture: i386:x86-64, flags 0x00000103:
HAS_RELOC, EXEC_P, D_PAGED
start address 0x0000000000401510

Leave a Reply

Your email address will not be published. Required fields are marked *