Tagged: #portable-executable

A reverse-engineer's tour of the PE file format: DOS header, NT headers, data directories, sections, the IAT, RVAs, and why packers abuse them.