I want to be able to accurately add a section to a binary by hand, without tools.
I am using Stud_Pe for adding a section to a binary. While this work, I feel it's important to be able to do this myself or at least understand it in it's entirety.
I thought there might be a pattern but it seems random and the sizes have to be exact , so I am curious if someone already knows.
Here is a difference list based on the bytes added. Why is this happening?
0x2000 2 bytes 0x3000 14 bytes 0x4000 10 bytes 0x5000 4 bytes 0x6000 18 bytes 0x7000 2 bytes 0x8000 16 bytes