Geek Answers Handbook

About the PE entry point in Windows

Is this always the lowest code section address?

+5
source share
1 answer

No, not necessarily. The PE entry point is defined in the IMAGE_OPTIONAL_HEADER structure in the field AddressOfEntryPoint:

Pointer to the function of the entry point relative to the base address of the image. For executable files, this is the starting address. For device drivers, this is the address of the initialization function. The entry point function is optional for DLLs. If there is no entry point, this member is zero.

, , , PE. text/code, PE.

+8

More articles:


All Articles