#LazyWeb What is the minimum possible offset of the entry point of a PE executable inside the file?

* summoning @Ange *

@buherator which version? it used to be 0 - and could even be negative ;)

@Ange OK that answers my question thanks :D How on Earth can there be a negative offset in a file?? I guess you can specify it in the header, it just won't run?

@buherator @Ange could it be like Python? Negative indices mean back from the end...

@buherator unless you provide a non-relocatable DLL at the right address:
https://github.com/corkami/pocs/blob/master/PE/dllnegep.asm

@buherator In any case, Windows became more restrictive about EP values, so this is not a relevant case anymore AFAIR.