Wednesday, October 22, 2014

Graphical PE Format Explanation


This diagram explains the PE layout after Windows OS Loader loads the image into the memory. The image used here is notepad.exe.

References:
http://msdn.microsoft.com/en-us/library/ms809762.aspx
http://www.csn.ul.ie/~caolan/pub/winresdump/winresdump/doc/pefile2.html

No comments:

Post a Comment