-
Notifications
You must be signed in to change notification settings - Fork 179
Open
Description
I have some COFF files from TI. They're recognized by Ghidra as having COFF Level 2 magic and start with:
1 │ 00000000 c2 00 0f 00 cf a2 30 55 74 e4 00 00 ee 01 00 00 |......0Ut.......|
2 │ 00000010 1c 00 f3 12 97 00 08 01 8a 13 d8 0b 00 00 00 00 |................|
3 │ 00000020 00 00 51 00 00 00 08 07 00 08 40 00 00 08 00 00 |..Q.......@.....|
4 │ 00000030 00 00 00 00 00 00 5b 08 00 00 00 00 00 00 00 00 |......[.........|
5 │ 00000040 00 00 30 00 00 00 02 03 00 00 00 00 00 00 00 00 |..0.............|
6 │ 00000050 00 00 00 00 00 00 00 00 00 00 10 00 00 00 08 00 |................|
7 │ 00000060 00 00 2e 69 6e 74 76 65 63 73 00 00 00 08 00 00 |...intvecs......|
I believe it's just a simple difference in the header, possibly with an additional field for the f_target_id
, but I don't quite understand how the parsing works yet.
Metadata
Metadata
Assignees
Labels
No labels