Traces ancestry directly back to COFF files.

Uses PDB for debugging information.

Portable Executable (PE)

Readings

Tools/Software

Loaders

Packers

Talks


Dynamic Link Libraries

DLLs are Win32 libraries, loaded and linked at runtime (hence the name), built on top of the Portable Executable format. DLLs and EXEs differ by basically one byte in the PE file format, indicating whether this is executable (and therefore has a main()-style entry point) or not.

Readings

Tools/Software

Talks


Tags: format   native   windows   pdb   pe  

Last modified 07 October 2024