I want to be able to accurately add a section to a binary by hand, without tools.
I am using Stud_Pe for adding a section to a binary. While this work, I feel it's important to be able to do this myself or at least understand it in it's entirety.
I thought there might be a pattern but it seems random and the sizes have to be exact , so I am curious if someone already knows.
Here is a difference list based on the bytes added. Why is this happening?
0x2000 2 bytes
0x3000 14 bytes
0x4000 10 bytes
0x5000 4 bytes
0x6000 18 bytes
0x7000 2 bytes
0x8000 16 bytes