25 Aug
2005
25 Aug
'05
9:30 a.m.
On Thursday 25 August 2005 09:56, Michael Jung wrote:
Would it be ok to look for an ELF header and then for an enclosed PE header in USER32_GetResourceTable (and then return IMAGE_NT_SIGNATURE and the correct pointer)? Where can I find informations about the format of ELF wrapped PEs?
Thinking about it again, there probably is no such thing as an ELF wrapped PE?
Bye,
--
Michael Jung
mjung@iss.tu-darmstadt.de