The First Entry-Point
If you download PEBrowse Professional, install and start it, you may first need to set a few options in order to fully expose the utility's capabilities. Select Tools/Configure... (or Ctrl+U) to bring up the configuration dialog box. See Figure 1:
Figure 1
On the Environment tab sheet, make certain the following option is checked:
"Display COM Interfaces?"
On the Disassembly tab sheet, do the same with
"Enable Analyze Mode?"
And, finally on the Debug Symbols tab sheet, check all of the following:
"Include strings in debug symbol list?"
"Include table items in debug symbol list?"
"Include static ctors in debug symbol list?"
Warning--these last three items will increase the number of debug symbols significantly with some binaries.
Load MSSCRIPT.OCX (File/Open File... or Ctrl+O) by navigating through your system, and you will be presented with something like what you see in Figure 2:
Figure 2
The tree view on the left-hand side, the Index, allows quick access to various important areas of a Portable Executable (PE) file. If you wish more information on the format, visit www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx. Locate and expand the node labeled, "Optional Header." Then select from the main menu (or from the popup menu), View/Disassemble Entry-Point, and you will now see Figure 3. Here is your first and the traditional entry-point.
Figure 3
 prev page | 1st page | next page  |