The AddressOfEntryPoint and Tips for Finding Main
The PE file format defines the entry point for execution through the AddressOfEntryPoint field. However, it's not as straight-forward as it may seem. In this video, we'll explore what this field is, where to find it and it's relationship with the main function.
Join this channel to get access to perks:
/ @jstrosch
Cybersecurity, reverse engineering, malware analysis and ethical hacking content!
🎓 Courses on Pluralsight 👉🏻 https://www.pluralsight.com/authors/j...
🌶️ YouTube 👉🏻 Like, Comment & Subscribe!
🙏🏻 Support my work 👉🏻 / joshstroschein
🌎 Follow me 👉🏻 / jstrosch , / joshstroschein
⚙️ Tinker with me on Github 👉🏻 https://github.com/jstrosch
🤝 Join the Discord community and more 👉🏻 https://www.thecyberyeti.com
0:38 Sample Binaries
1:14 Compiling
1:39 Finding AddressOfEntryPoint in 010 Editor
3:20 32-Bit PE file layout
3:46 Tips for Finding Main
5:15 Arguments for main in x64 binary
11:03 Start in a packed binary (Lockbit 3.0)