T
T
Type Programmer2020-10-22 23:24:44
reverse engineering
Type Programmer, 2020-10-22 23:24:44

Where does code execution begin?

As far as I know, programs have an entry point, well, something like the main function, the program loader from the OS transfers control through it, and everything seems to be simple.

But recently, through ollydbg, and ida, I could not force the program to stop at the entry point, the code seemed to start executing from a different address, and only then control was transferred to it.

As it turned out later (if I'm really not mistaken, since I just found the module through ollydbg, in which the breakpoint worked, if not ntdll :] ), functions from some dynamic library were first executed, but how is it, if in any case, the program first had to pass the entry point, on which I had a breakpoint.

I'm not very good at it all, I'm just curious to understand how it works. I apologize in advance if I wrote stupidity somewhere, or poorly described the essence ...

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question