research32

A Portable Executable (PE) file usually contains some headers and some sections. One of the sections, that may exist, is the .reloc section,...

There is a lot of information on the net, showing the concepts of a stack data structure. I bet you know how a stack works. I also bet you a...

A couple of weeks ago, I was inspecting and comparing the .text section of a PE file (notepad.exe) and the corresponding .text section which...

In my previous post, I made a graphical memory layout for the notepad process. I showed the complete 4 GB virtual memory space (or at least ...

I've seen several sites on the internet, which describes how the virtual memory layout looks like for a Win32 application. But these sit...