Reverse Engineering Windows EXE files on Linux

Streamed Live on Twitch: twitch.tv/tsoding
Enable Subtitles for Twitch Chat

Chapters:
00:00:00 - Beatbox
00:00:27 - Intro
00:06:25 - Project Building
00:15:43 - Loading EXE file
00:18:08 - DOS Header and DOS STUB
00:44:52 - COFF Header
00:57:30 - Skipping Optional PE Header
01:05:04 - Section Table
01:28:36 - Dumping Raw Data of Sections
01:32:16 - Trying to find CLR
02:08:22 - CLI Header
02:30:29 - Not Skipping Optional PE Header
02:40:47 - Relative Virtual Address (RVA)
03:24:43 - CLI MetaData
03:36:10 - Stream Headers
03:55:07 - CLI Streams
04:05:32 - Outro

References:
en.wikipedia.org/wiki/Portable_Executable
learn.microsoft.com/en-us/windows/win32/debug/pe-f…
www.red-gate.com/simple-talk/blogs/anatomy-of-a-ne…
www.ecma-international.org/wp-content/uploads/ECMA…

Topic: Reverse engineering an EXE file generated by the Mono C# Compiler to see if I can recreate it myself from scratch as part of the CLR target for the B compiler.

Twitch Chat in Subtitles generated by: github.com/kam1k4dze/subchat

Support:
github.com/tsoding/donate#support-tsoding