HEADER FILE (PE)
Format
File PE
(Portable Executable) mulai dikenalkan pada Windows NT 3.1, dimana format file
ini masih menyimpan header MZ dari MS-DOS. Berikut skema dasar format file PE :
|----------------------------|
| CodeView Debug Information |
|----------------------------|
| COFF Symbols |
|----------------------------|
| COFF Line
Numbers |
|----------------------------|
| Section
- n |
|
. |
|
. |
| Section
- 2 |
|----------------------------|
| Section
- 1 |
|----------------------------|
| Section
- 0 |
|----------------------------|
| Array
Section table |
|
. |
|
. |
| Array
Section table |
|----------------------------|
| Data
Directory |
|----------------------------|
| |
|----------------------------|
| Image
File Header |
|----------------------------|
| "PE\0\0" |
|----------------------------|
|
"MZ" |
|----------------------------|
Gambar 2.6 Skema PE
untuk melihat halaman selanjutnya klik disini