可移植可执行结构解释
我正在学习可移植可执行文件的结构。我浏览了 MSDN 文章，但我对此有点困惑。我对它们的精确结构和功能有些困惑。
有人可以帮助我，或者请我参考一篇不错的文章吗？
I am learning the structure of a portable executable. I went through the MSDN article but I am a bit confused about it. I have some confusion with their precise stucture and its functionality.
Can anybody help me or please refer me to a nice article for this?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
要获得比官方规范更具讨论性的方法，您应该查看 Matt Pietrek 1994 年的文章 深入了解 PE：Win32 可移植可执行文件格式之旅。这种解释比枯燥的官方风格的规范更具可读性。
For a more discursive approach than official specs, you should have a look at Matt Pietrek 1994 article Peering inside the PE: A tour of the Win32 Portable Executable File Format. The explanation is more readable than the dry, official style of the specs.
这是来自 MSFT 的官方当前 PE/COFF 规范：http://www .microsoft.com/whdc/system/platform/firmware/PECOFF.mspx
This is the official current PE/COFF spec from MSFT: http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx
您应该在 http 上查看 PE 格式的出色表示： //www.openrce.org/reference_library/files/reference/PE%20Format.pdf。
缺少一些（64 位）字段，但与实际情况接近 99%。
我使用此模式开发了一个产品来分析 PE 文件，您可以在 www.winitor.com。希望有帮助。
You should take a look to the excellent representation of the PE Format at http://www.openrce.org/reference_library/files/reference/PE%20Format.pdf.
Some (64Bits) fields are missing, but it is up to 99% close to the reality.
I used this schema to work on a product to analyze PE Files, which you can be download at www.winitor.com. Hope it helps.