dimanche 1 mars 2015

How to diffrentiate 16 bit MZ and 32 bit MZ

I need to differentiate a 32 bit PE from a 16 bit DOS MZ. What is the correct way to do it? I can use heuristics like looking for the PE header, but I feel like it's not necessarily deterministic


Aucun commentaire:

Enregistrer un commentaire