windows - Strange Value in EXE header -
I have seen the strange value placed in the EXE header
00000000: 4D 5A 90 00 03 00 00 00 - 04 00 00 00 FF FF 00 00 0010: B8 00 00 00 00 00 00 - 40 00 00 00 00 00 00 00000020: 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000030: 00 00 00 00 00 00 00 - 00 00 00 00 8 00 00 00 000000: 00 00 00 00 00 00 00 00 - 00 00 00 00 A8 00 00 00 & lt; -
I do not know what is A8
but if I change it from zero then my program does not execute.
In a word: What is that?
Besides, can you also link me to full MS DOS header?
Offset 0x3c on DWORD, offset of new EXE header, alias IMAGE_NT_HEADERS So if you value there If the change, then the PE loader can not find the new EXE header.
Comments
Post a Comment