Moderátoři: Lms, GasThan, Martin J. - Cetelon, Moderátoři
PE HEADER
DOS Header
**********
00000000 4D5A 9000 0300 0000 0400 0000 FFFF 0000 MZ..............
00000010 B800 0000 0000 0000 4000 0000 0000 0000 ........@.......
00000020 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000030 0000 0000 0000 0000 0000 0000 8000 0000 ................
00000040 0E1F BA0E 00B4 09CD 21B8 014C CD21 5468 ........!..L.!Th
00000050 6973 2070 726F 6772 616D 2063 616E 6E6F is program canno
00000060 7420 6265 2072 756E 2069 6E20 444F 5320 t be run in DOS
00000070 6D6F 6465 2E0D 0D0A 2400 0000 0000 0000 mode....$.......
MZ Header
*********
WORD e_magic; > Nombre Magique ( 4D5A )
WORD e_cblp; > Bytes on last page of file
WORD e_cp; > Pages in file
WORD e_crlc; > Relocations
WORD e_cparhdr; > Size of header in paragraphs
WORD e_minalloc; > Minimum extra paragraphs needed
WORD e_maxalloc; > Maximum extra paragraphs needed
WORD e_ss; > Initial (relative) SS value
WORD e_sp; > Initial SP value
WORD e_csum; > Checksum
WORD e_ip; > Initial IP value
WORD e_cs; > Initial (relative) CS value
WORD e_lfarlc; > File address of relocation table
WORD e_ovno; > Overlay number
WORD e_res[4]; > Reserved words
WORD e_oemid; > OEM identifier (for e_oeminfo)
WORD e_oeminfo; > OEM information; e_oemid specific
WORD e_res2[10]; > Reserved words
DWORD e_lfanew; > File address of new exe header
00000000 5A4D Signature: MZ
00000002 0090 Extra Bytes
00000004 0003 Pages
00000006 0000 Reloc Items
00000008 0004 Header Size
0000000A 0000 Min Alloc
0000000C FFFF Max Alloc
0000000E 0000 Initial SS
00000010 00B8 Initial SP
00000012 0000 Check Sum
00000014 0000 Initial IP
00000016 0000 Initial CS
00000018 0040 Reloc Table
0000001A 0000 Overlay
PE File Header
*************
00000080 5045 0000 4C01 0600 8D54 F32F 0000 0000 PE..L....T./....
00000090 0000 0000 E000 0E01 ........
WORD Machine Type ( 014C ) i386
WORD Nombre de Sections ( 0006 )
DWORD Time/Date ( 2FF3548D )
DWORD Pointeur vers la table des Symboles ( 00000000 )
DWORD Nombre de Symboles ( 00000000 )
WORD Taille de l'Optional Header ( 00E0 )
WORD Caracteristiques ( 010E )
00000080 00004550 Signature: PE
00000084 014C Machine: 014C=I386
00000086 0005 Number of Sections
00000088 2FF3548D Time/Date Stamp
0000008C 00000000 Pointer to Symbol Table
00000090 00000000 Number of Symbols
00000094 00E0 Optional Header Size
00000096 010E Characteristics
Uživatelé procházející toto fórum: Žádní registrovaní uživatelé a 33 návštevníků