No they haven't. It's just that your headers are at ImageBase, which is usually 00400000h. I can't see why there would be an MZ signature at . And you shouldn't even be able to read that region. But Svin has said all that before.
Posted on 2001-05-15 08:56:00 by f0dder
:ashamed: Okay, I've adjusted ZoomIn a bit. Would someone test on NT or Win2000? Thanks much, as the say in the States. Meanwhile I'll start a new thread on PE details. Larry
Posted on 2001-05-15 09:31:00 by Larry Hammick
The new Zoomin works on Win98
Posted on 2001-05-15 20:47:00 by Larry Hammick
It's not very hard to please win98. It will allow FileAlign less than 512, severely damaged PE header, and all sorts of things that are clearly violations of the PE standard. Quite interesting, really, the FileAlign thing. 95, iirc, didn't allow FileAlign less than 512, whereas NT4 did. Now win98 allows it, and win2k doesn't. Strange indeed.
Posted on 2001-05-16 06:45:00 by f0dder
The new Zoomin doesn't work on NT4.
Posted on 2001-05-16 09:33:00 by gliptic