NO

Author Topic: Preview #2 of PE/COFF Viewer  (Read 13428 times)

Offline Marco

  • Member
  • *
  • Posts: 45
Re: Preview #2 of PE/COFF Viewer
« Reply #15 on: June 15, 2021, 11:12:02 AM »
I also tried it with several files. It does work great. Very well done!  :)

Grincheux

  • Guest
Re: Preview #2 of PE/COFF Viewer
« Reply #16 on: June 15, 2021, 01:13:09 PM »

Version 0.99 is the last version.
Would be a good idea to copy into the clipboard only one line rather than all the code.

Offline Pelle

  • Administrator
  • Member
  • *****
  • Posts: 2266
    • http://www.smorgasbordet.com
Re: Preview #2 of PE/COFF Viewer
« Reply #17 on: June 15, 2021, 08:06:08 PM »
I also tried it with several files. It does work great. Very well done!  :)
Thanks!  :)
/Pelle

Offline Pelle

  • Administrator
  • Member
  • *****
  • Posts: 2266
    • http://www.smorgasbordet.com
Re: Preview #2 of PE/COFF Viewer
« Reply #18 on: June 15, 2021, 08:09:03 PM »
Version 0.99 is the last version.
Would be a good idea to copy into the clipboard only one line rather than all the code.
Something to consider for a later version, I think.
/Pelle

Offline John Z

  • Member
  • *
  • Posts: 860
Re: Preview #2 of PE/COFF Viewer
« Reply #19 on: June 16, 2021, 02:40:50 PM »
Question 1:

It seems every DLL file I look at, even old 32 bit from PellesC 9, show under the "Image_File_Header" section item "Machine" they all show "IMAGE_FILE_MACHINE_AMD64".  So I checked the flags of the LineCount.DLL and see a macro ASFLAGS -AAMD64 -Gr now I'm on a I7 10th gen so probably my mistake.  However every PellesC 9 Add-in DLL showed the same AMD64 machine.

Is it right?

Question 2:
I use the version control in the LineCount.dll in explorer right click on properties shows the version under details.  Using PE/COFF viewer on the DLL under the '.rsrc' section, IMAGE_RESOURCE_DIRECTORY (types) I see Major and Minor version entries but they don't show the version information.

Is it different version from somewhere else?

-------
You can probably tell I'm a novice at using a tool like this  :)

John Z

Grincheux

  • Guest
Re: Preview #2 of PE/COFF Viewer
« Reply #20 on: June 16, 2021, 04:51:53 PM »
Q1:AMD64 rather than INTEL is because they were the first to implement that instruction set.
If you have a CPU INTEL that works, this is a generic name.

Quote
You can probably tell I'm a novice at using a tool like this

That is better that misunderstanding.

They are people that say they have understood to hide the fact they don't know.
I hope you will have more questions like this.
« Last Edit: June 16, 2021, 04:53:25 PM by Grincheux »