flat assembler
Message board for the users of flat assembler.
Index
> Windows > Why Is not a valid win32 application |
Author |
|
bitshifter 10 Jan 2010, 04:28
You really want to do this?
Code: mov esi,[eax+3ch] add esi,[ImageBase] mov [pNt],esi pNT = (ImageBase + 3ch) * 2 Just a guess... |
|||
10 Jan 2010, 04:28 |
|
baldr 12 Jan 2010, 16:38
yinke,
You've hardcoded new section's VirtualAddress as 27000h, probably that address is already occupied. Windows performs several sanity checks when loading image, probably new section's PointerToRawData is invalid (after EOF). bitshifter, That's OK: he adds e_lfanew from MZ header to image's mapped view address to get pointer to PE signature/headers (check your pseudocode ). |
|||
12 Jan 2010, 16:38 |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2025, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.