75 Topics
Question

How would one restore missing PE headers?

Question

Where is the digital signature stored when code signing a exe file in windows?

Question

What does "e_lfanew" mean in the DOS header for the PE format?

Question

How to get the starting address of each PE section in C?

Question

How to add a (SEH) exception handler dynamically for a 64-bit function?

Question

How to specify a "clean" name of DLL exports?

Question

Is there a possibility that PE format will change in the future?

Question

Virtual Address assigned to an imported function

Question

Check if PE is 32 or 64 bit

Question

Detecting Invalid Resource sections in PE FIles

Question

Why does a loaded PE binary need IAT?

Question

How to get module image name from an arbitrary address in Windows kernel space?

Question

How to look up 64-bit module's function table when it's mapped in memory?

Question

Is it possible to create a Windows exe from assembly code without linking to the c library and without using ExitProcess()?

Question

Can't find AddressOfEntryPoint in notpad.exe PE Header