Log in

View Full Version : How to analyse and fix PE integrity (not a valid win32 app)?


Uridium
June 11th, 2010, 09:44
Hallo,
when i try to start the on-screen keyboard (osk.exe) from win7 in winxp a standard error comes up 'not a valid win32 app'. I tried to analyze the PE header with 'ExplorerSuite' but couldn't see anything suspicious. There are some dependencies/dlls missing though but those should throw another error msg i think.

Any ideas how to gain knowledge why the app is launching in win7 but not in xp?

Kurapica
June 11th, 2010, 11:11
use PEverify utility

PEVerify.exe "Target" /HRESULT /NOLOGO /VERBOSE

you can find this utility in

C:\Program Files\Microsoft SDKs\Windows\v6.0A\Bin

the SDK ships with Visual Studio 2005 or later

BoB
June 11th, 2010, 13:43
If the app is written for Win7 then it probably has PE_Header.SubSystem_Major set to 6 or 7. That would cause this error I think. Try setting it to 4, see if that helps.

BoB

Uridium
June 27th, 2010, 15:16
Yep. You're right. Now its mocking about missing 'Event Register' Function in 'AdvApi32.dll'.

Thx!