What is 0xC000011B

 
Previous Next
STATUS_INVALID_LDT_DESCRIPTOR STATUS_RXACT_INVALID_STATE

STATUS_INVALID_IMAGE_NE_FORMAT

STATUS_INVALID_IMAGE_NE_FORMAT (0xC000011B) error is returned if the system cannot find the correct PE header following the NE header and MSDOS header is correct.

The Portable Executable (PE) format is a file format for executables, object code, DLLs and others used in 32-bit and 64-bit versions of Windows operating systems. The PE format is a data structure that encapsulates the information necessary for the Windows OS loader to manage the wrapped executable code. This includes dynamic library references for linking, API export and import tables, resource management data and thread-local storage (TLS) data. On NT operating systems, the PE format is used for EXE, DLL, SYS (device driver), MUI and other file types. The Unified Extensible Firmware Interface (UEFI) specification states that PE is the standard executable format in EFI environments.

STATUS_INVALID_IMAGE_NE_FORMAT * MS DOS headerOn Windows NT operating systems, PE currently supports the x86-32, x86-64 (AMD64/Intel 64), IA-64, ARM and ARM64 instruction set architectures (ISAs). Prior to Windows 2000, Windows NT (and thus PE) supported the MIPS, Alpha, and PowerPC ISAs. Because PE is used on Windows CE, it continues to support several variants of the MIPS, ARM (including Thumb), and SuperH ISAs.

Microsoft migrated to the PE format from the 16-bit NE formats with the introduction of the Windows NT 3.1 operating system. All later versions of Windows, including Windows 95/98/ME and the Win32s addition to Windows 3.1x, support the file structure. The format has retained limited legacy support to bridge the gap between DOS-based and NT systems. For example, PE/COFF headers still include a DOS executable program, which is by default a DOS stub that displays a message like “This program cannot be run in DOS mode” (or similar), though it can be a full-fledged DOS version of the program (a later notable case being the Windows 98 SE installer). If NE header is not correct (for example this is a text or image file), STATUS_INVALID_IMAGE_NE_FORMAT will not be returned. This constitutes a form of fat binary. PE also continues to serve the changing Windows platform. Some extensions include the .NET PE format, a 64-bit version called PE32+ (sometimes PE+), and a specification for Windows CE.

The PE file format is organized as a linear stream of data. It begins with an MS-DOS header, a real-mode program stub, and a PE file signature. Immediately following is a PE file header and optional header. Beyond that, all the section headers appear, followed by all of the section bodies. Closing out the file are a few other regions of miscellaneous information, including relocation information, symbol table information, line number information, and string table data.

In most cases the reason of STATUS_INVALID_IMAGE_NE_FORMAT in that binary file is corrupted or taken from old OS.