trietptm / corkami Goto Github PK

Summary pretty much says it all. The error message I receive is 'This app can't 
run on your PC', which is what I normally see when trying to run a 16-bit or 
otherwise malformed PE file.

Works fine in a VM on older Windows versions though. Thanks for providing CoST, 
it's a great test for some PE stuff I'm doing at the moment. :)

1.  Navigate to http://code.google.com/p/corkami/wiki/PE101
2.  Click on any of the SVG links, for example, this one: 
https://corkami.googlecode.com/svn/trunk/graph/pe101/pe101.svg
3.  The response has a content type of text/plain

The expected content type is "image/svg+xml".

The returned content type is "text/plain".

Using the correct content type enables modern browsers to display the SVG image 
without the for an external viewer.

Can you do a poster on IEEE754 (floating-point representation)

Just to let you know, tinyW7_3264.asm crashes on my Win7 machine.

OS: Windows 7 x64 SP1 (6.1.7601), all updates installed as of 2014-09-06

Crash message:

Unhandled exception at 0x77660c7b (ntdll.dll) in tinyW7_3264.exe: 0xC0000005: 
Access violation reading location 0x57682042.

Stack trace:

>   ntdll.dll!_LdrpCheckForSecuROMImage@4()  + 0x76 bytes   
    ntdll.dll!_LdrpInitializeProcess@8()  + 0x3320e bytes   
    ntdll.dll!__LdrpInitialize@8()  + 0xb4c9 bytes  
    ntdll.dll!_LdrInitializeThunk@8()  + 0x10 bytes 

Maybe LdrpCheckForSecuROMImage is some new compatibility shim? Or am I doing 
something wrong?

My ntdll.dll is 6.1.7601.18247, md5sum: a2b0924d50f4435fd389499047ce553a

helloworld-r87.zip 
Is not compatible with Windows 7 x64

http://pastebin.com/90vVV00e

Enjoy.

In Windows7 (and afaik starting with Vista) the maximum number of sections is 
0xffff.

I've attached two files (32 and 64 bit) which have 0xffff sections. Some tools 
do break when trying to parse/load them.

It's the same limit for 64bit if you want to add that to the corpus.

They just have an endless loop at the entry point, but you can see in the task 
manager that they load and run.

pw (for both): "cleanfile"