No they haven't. It's just that your headers are at ImageBase,
which is usually 00400000h. I can't see why there would be an
MZ signature at . And you shouldn't even be able to read
that region. But Svin has said all that before.
:ashamed: Okay, I've adjusted ZoomIn a bit. Would someone test
on NT or Win2000? Thanks much, as the say in the States.
Meanwhile I'll start a new thread on PE details.
Larry
The new Zoomin works on Win98
It's not very hard to please win98. It will allow FileAlign less
than 512, severely damaged PE header, and all sorts of things that
are clearly violations of the PE standard. Quite interesting,
really, the FileAlign thing. 95, iirc, didn't allow FileAlign
less than 512, whereas NT4 did. Now win98 allows it, and win2k
doesn't. Strange indeed.
The new Zoomin doesn't work on NT4.