PE & x64 Foundations

PE file structure

The Portable Executable format describes how Windows loads executable code and data. Common sections include .text for code and .rdata/.data for data.

ArtifactPurpose
PE headerFormat and machine information
SectionsCode/data/resources
Import tableExternal functions used
Export tableFunctions exposed by a module
RelocationsAddress adjustment metadata
Lesson complete?Use the next lesson to continue the learning path.