I have been spending more time as of late looking at the PE header format. There are some strange fields in there let me tell you. For example the date time group is represented by a DWORD value which is flipped about. By that I mean instead of being displayed left to right as the hex representation it is right to left. Almost as if it is in network byte order. Weird! That is one of a couple of values that is presented as such. The remainder are laid out in the normal fashion. Any of you guys have something to pass onto to me about this?