PE format for win32 exe

  • Thread starter Thread starter Z. V
  • Start date Start date
Z

Z. V

Guest
Hello,

I built a win32 console application and then tried to inspect the exe file according to:

PE Format

Offset 0x3C has a 16 bits offset to where the file header starts.

This file header is 20 bytes long.

f_magic = 0x4550 (PE)

f_nscns = 0

f_opthdr = 0;

This does not make sense.

How can f_nscns be 0 ?

24 bytes after the file header I have 0x10B which is the magic in the optional file header.

How can f_opthdr be 0 if there is an optional file header ?

Thank you,

Zvika

Continue reading...
 
Back
Top