No they haven't. It's just that your headers are at ImageBase, which is usually 00400000h. I can't see why there would be an MZ signature at . And you shouldn't even be able to read that region. But Svin has said all that before.
:ashamed: Okay, I've adjusted ZoomIn a bit. Would someone test on NT or Win2000? Thanks much, as the say in the States. Meanwhile I'll start a new thread on PE details. Larry
The new Zoomin works on Win98
It's not very hard to please win98. It will allow FileAlign less than 512, severely damaged PE header, and all sorts of things that are clearly violations of the PE standard. Quite interesting, really, the FileAlign thing. 95, iirc, didn't allow FileAlign less than 512, whereas NT4 did. Now win98 allows it, and win2k doesn't. Strange indeed.
The new Zoomin doesn't work on NT4.