PE address spaces
File offsets, relative virtual addresses, and the boundary between inspection and loading.
PROJECT TRINITY / RECORD INDEX
Research
Working explanations grounded in implementation. Revised as the code and understanding change.
active notes / R01
The static inspection boundary
Separating a PE image model from the machinery that executes it.