I am currently doing byte extraction from PE files using Radare2. I know how to find the byte sequence for DOS Header and PE Header when there is no entry point and the start is defaulted to 0x0. But some of them have an entry point at 0x4#####
.
I can retrieve the vaddr
(virtual address), paddr
(physical address), and haddr
(e_entry\AddressOfEntryPoint in the binary header) of a certain file with an entry point.
How do I use that to find the byte sequence for the DOS Header and PE Header?