For exceptions, see the descripton of IMAGE_DEBUG_TYPE_REPRO in Debug Type. In most cases, the format of each stamp is the same as that used by the time functions in the C run-time library. This document describes details about attribute certificates other than to allow for their insertion into image files.Ī stamp that is used for different purposes in several places in a PE or COFF file. The statement can be verified as being made by the manufacturer by using public or private key cryptography schemes. Therefore, it is very difficult to modify a file to have the same message digest as the original file. A message digest is similar to a checksum except that it is extremely difficult to forge. A number of different verifiable statements can be associated with a file one of the most useful ones is a statement by a software manufacturer that indicates what the message digest of the image is expected to be. The name "Portable Executable" refers to the fact that the format is not architecture specific.Ĭertain concepts that appear throughout this specification are described in the following table: NameĪ certificate that is used to associate verifiable statements with an image.
#Convert hex to win32 file time format portable#
These files are referred to as Portable Executable (PE) and Common Object File Format (COFF) files, respectively. This document specifies the structure of executable (image) files and object files under the Microsoft Windows family of operating systems. This revision of the Microsoft Portable Executable and Common Object File Format Specification replaces all previous revisions of this specification. Microsoft reserves the right to alter this document without notice.
This document is provided to aid in the development of tools and applications for Windows but is not guaranteed to be a complete specification in all respects.
0 kommentar(er)
