Graphical PE Format Explanation
This diagram explains the PE layout after Windows OS Loader loads the image into the memory. The image used here is notepad.exe.
References:
http://msdn.microsoft.com/en-us/library/ms809762.aspx
http://www.csn.ul.ie/~caolan/pub/winresdump/winresdump/doc/pefile2.html
No comments:
Post a Comment