Skip navigation.

PE FILE analysis


Trying to understand the addressofentrypoint in the optionalheader. Is this only useful when the pe file is loaded in memory? In other words can it be used to find the same point while viewing the pe file with a hex editor?

yep, with some

yep, with some calculations
or just use hiew