{"id":478479,"date":"2023-08-09T09:33:22","date_gmt":"2023-08-09T09:33:22","guid":{"rendered":""},"modified":"2023-09-05T11:16:49","modified_gmt":"2023-09-05T11:16:49","slug":"portable-executable-pe-file-header","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/portable-executable-pe-file-header\/","title":{"rendered":"\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934"},"content":{"rendered":"

\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u7684\u5386\u53f2\u548c\u8d77\u6e90<\/h2>\n

\u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE) \u6587\u4ef6\u5934\u662f Microsoft Windows \u64cd\u4f5c\u7cfb\u7edf\u7684\u5173\u952e\u7ec4\u4ef6\u3002\u5b83\u662f Windows \u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6\u683c\u5f0f\u7684\u57fa\u672c\u7ed3\u6784\u3002 PE\u6587\u4ef6\u5934\u7684\u6982\u5ff5\u53ef\u4ee5\u8ffd\u6eaf\u5230Windows\u64cd\u4f5c\u7cfb\u7edf\u7684\u65e9\u671f\u53d1\u5c55\u3002<\/p>\n

20 \u4e16\u7eaa 90 \u5e74\u4ee3\u521d\uff0c\u5fae\u8f6f\u63a8\u51fa\u4e86 Windows 3.0 \u64cd\u4f5c\u7cfb\u7edf\uff0c\u8fd9\u6807\u5fd7\u7740\u4e0e\u5176\u524d\u8eab MS-DOS \u7684\u91cd\u5927\u8f6c\u53d8\u3002\u65b0\u7684\u64cd\u4f5c\u7cfb\u7edf\u5e26\u6765\u4e86\u56fe\u5f62\u7528\u6237\u754c\u9762\u548c\u540c\u65f6\u6267\u884c\u591a\u4e2a\u7a0b\u5e8f\u7684\u80fd\u529b\u3002\u968f\u7740\u8f6f\u4ef6\u590d\u6742\u6027\u7684\u4e0d\u65ad\u589e\u52a0\uff0c\u9700\u8981\u4e00\u79cd\u6807\u51c6\u5316\u7684\u6587\u4ef6\u683c\u5f0f\u6765\u5c01\u88c5\u53ef\u6267\u884c\u4ee3\u7801\u548c\u6570\u636e\uff0c\u540c\u65f6\u5b9e\u73b0\u7a0b\u5e8f\u7684\u9ad8\u6548\u52a0\u8f7d\u548c\u6267\u884c\u3002<\/p>\n

\u8fd9\u79cd\u9700\u6c42\u5bfc\u81f4\u4e86\u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE) \u6587\u4ef6\u683c\u5f0f\u7684\u8bde\u751f\uff0c\u8be5\u6587\u4ef6\u683c\u5f0f\u5728 1993 \u5e74\u53d1\u5e03\u7684 Windows NT 3.1 \u4e2d\u5f15\u5165\u3002PE \u683c\u5f0f\u65e8\u5728\u53d6\u4ee3 16 \u4f4d Windows \u7248\u672c\u4e2d\u4f7f\u7528\u7684\u8f83\u65e7\u7684\u65b0\u53ef\u6267\u884c\u6587\u4ef6 (NE) \u683c\u5f0f\u3002\u81ea\u8bde\u751f\u4ee5\u6765\uff0cPE \u6587\u4ef6\u5934\u7ecf\u5386\u4e86\u5404\u79cd\u4fee\u6539\u548c\u589e\u5f3a\uff0c\u4ee5\u9002\u5e94 Windows \u751f\u6001\u7cfb\u7edf\u4e0d\u65ad\u53d8\u5316\u7684\u9700\u6c42\u3002<\/p>\n

\u6709\u5173\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n

\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u662f PE \u6587\u4ef6\u4e2d\u5b9e\u9645\u53ef\u6267\u884c\u4ee3\u7801\u548c\u6570\u636e\u4e4b\u524d\u7684\u91cd\u8981\u7ec4\u6210\u90e8\u5206\u3002\u5176\u4e3b\u8981\u76ee\u7684\u662f\u63d0\u4f9b\u6709\u5173\u53ef\u6267\u884c\u6587\u4ef6\u7684\u7ed3\u6784\u548c\u7279\u5f81\u7684\u91cd\u8981\u4fe1\u606f\uff0c\u4f7f\u64cd\u4f5c\u7cfb\u7edf\u80fd\u591f\u6b63\u786e\u52a0\u8f7d\u548c\u6267\u884c\u7a0b\u5e8f\u3002 PE\u6587\u4ef6\u5934\u4e2d\u5b58\u50a8\u7684\u4e00\u4e9b\u5173\u952e\u4fe1\u606f\u5305\u62ec\uff1a<\/p>\n

    \n
  1. \n

    \u795e\u5947\u6570\u5b57<\/strong>\uff1aPE \u6587\u4ef6\u5934\u4ee5 2 \u5b57\u8282\u5e7b\u6570\u5f00\u5934\uff0cASCII \u5f62\u5f0f\u4e3a\u201cMZ\u201d\u6216\u201cZM\u201d\u3002\u6b64\u7b7e\u540d\u8868\u660e\u8be5\u6587\u4ef6\u662f\u6709\u6548\u7684 PE \u6587\u4ef6\u3002<\/p>\n<\/li>\n

  2. \n

    \u5efa\u7b51\u5b66<\/strong>\uff1a\u6587\u4ef6\u5934\u5305\u542b\u4e00\u4e2a\u5b57\u6bb5\uff0c\u6307\u5b9a\u53ef\u6267\u884c\u6587\u4ef6\u7684\u76ee\u6807\u4f53\u7cfb\u7ed3\u6784\uff0c\u4f8b\u5982 x86\u3001x64\u3001ARM \u6216\u5176\u4ed6\u3002<\/p>\n<\/li>\n

  3. \n

    \u65f6\u95f4\u6233<\/strong>\uff1a\u6807\u5934\u5305\u542b\u4e00\u4e2a\u65f6\u95f4\u6233\uff0c\u6307\u793a\u53ef\u6267\u884c\u6587\u4ef6\u7684\u521b\u5efa\u6216\u94fe\u63a5\u65f6\u95f4\u3002<\/p>\n<\/li>\n

  4. \n

    \u5165\u53e3\u70b9\u5730\u5740<\/strong>\uff1a\u8be5\u5b57\u6bb5\u8868\u793a\u7a0b\u5e8f\u6267\u884c\u5f00\u59cb\u7684\u5165\u53e3\u70b9\u7684\u5185\u5b58\u5730\u5740\u3002<\/p>\n<\/li>\n

  5. \n

    \u56fe\u50cf\u57fa\u5730\u5740<\/strong>\uff1a\u6620\u50cf\u57fa\u5730\u5740\u6307\u5b9a\u7cfb\u7edf\u5e94\u52a0\u8f7d\u53ef\u6267\u884c\u6587\u4ef6\u7684\u9996\u9009\u865a\u62df\u5185\u5b58\u5730\u5740\u3002<\/p>\n<\/li>\n

  6. \n

    \u90e8\u5206<\/strong>\uff1aPE\u6587\u4ef6\u5206\u4e3a\u591a\u4e2a\u90e8\u5206\uff0c\u6807\u5934\u5305\u542b\u6709\u5173\u8fd9\u4e9b\u90e8\u5206\u7684\u4fe1\u606f\uff0c\u5305\u62ec\u5b83\u4eec\u7684\u865a\u62df\u5730\u5740\u3001\u5927\u5c0f\u548c\u7279\u5f81\u3002<\/p>\n<\/li>\n

  7. \n

    \u5bfc\u5165\u548c\u5bfc\u51fa\u8868<\/strong>\uff1a\u8fd9\u4e9b\u8868\u5b58\u50a8\u6709\u5173\u53ef\u6267\u884c\u6587\u4ef6\u4f9d\u8d56\u548c\u63d0\u4f9b\u7684\u51fd\u6570\u548c\u5e93\u7684\u4fe1\u606f\u3002<\/p>\n<\/li>\n

  8. \n

    \u642c\u8fc1\u4fe1\u606f<\/strong>\uff1aPE \u5934\u5305\u542b\u91cd\u5b9a\u4f4d\u6570\u636e\uff0c\u4ee5\u4fbf\u4e8e\u5728\u9700\u8981\u65f6\u5728\u4e0d\u540c\u7684\u57fa\u5730\u5740\u52a0\u8f7d\u53ef\u6267\u884c\u6587\u4ef6\u3002<\/p>\n<\/li>\n

  9. \n

    \u6821\u9a8c\u548c<\/strong>\uff1a\u6807\u5934\u5305\u542b\u6821\u9a8c\u548c\uff0c\u4ee5\u786e\u4fdd\u52a0\u8f7d\u8fc7\u7a0b\u4e2d\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u3002<\/p>\n<\/li>\n

  10. \n

    \u8c03\u8bd5\u4fe1\u606f<\/strong>\uff1a\u6807\u5934\u53ef\u4ee5\u5b58\u50a8\u8c03\u8bd5\u6570\u636e\u4ee5\u5e2e\u52a9\u8f6f\u4ef6\u5f00\u53d1\u548c\u6545\u969c\u6392\u9664\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u53ef\u79fb\u690d\u53ef\u6267\u884c\uff08PE\uff09\u6587\u4ef6\u5934\u7684\u5185\u90e8\u7ed3\u6784<\/h2>\n

    PE \u6587\u4ef6\u5934\u7531\u51e0\u4e2a\u6570\u636e\u5b57\u6bb5\u548c\u7ed3\u6784\u7ec4\u6210\uff0c\u8fd9\u4e9b\u6570\u636e\u5b57\u6bb5\u548c\u7ed3\u6784\u5bf9\u4e8e\u53ef\u6267\u884c\u6587\u4ef6\u7684\u6b63\u5e38\u8fd0\u884c\u81f3\u5173\u91cd\u8981\u3002\u4e0b\u9762\u7b80\u5355\u4ecb\u7ecd\u4e00\u4e0bPE\u6587\u4ef6\u5934\u7684\u5185\u90e8\u7ed3\u6784\uff1a<\/p>\n

    COFF \u6807\u5934<\/h3>\n

    PE \u6587\u4ef6\u5934\u4ee5\u901a\u7528\u5bf9\u8c61\u6587\u4ef6\u683c\u5f0f (COFF) \u5934\u5f00\u59cb\uff0c\u5176\u4e2d\u5305\u542b\u6709\u5173\u6587\u4ef6\u7684\u4e00\u822c\u4fe1\u606f\uff0c\u4f8b\u5982\u5176\u4f53\u7cfb\u7ed3\u6784\u3001\u65f6\u95f4\u6233\u548c\u90e8\u5206\u6570\u91cf\u3002<\/p>\n

    \u53ef\u9009\u6807\u9898<\/h3>\n

    \u5728 COFF \u6807\u5934\u4e4b\u540e\uff0cPE \u6587\u4ef6\u6807\u5934\u5305\u542b\u4e00\u4e2a\u53ef\u9009\u6807\u5934\uff0c\u8be5\u6807\u5934\u7279\u5b9a\u4e8e Windows \u64cd\u4f5c\u7cfb\u7edf\u3002\u53ef\u9009\u7684\u6807\u5934\u5305\u62ec\u4e0e\u56fe\u50cf\u5c5e\u6027\u76f8\u5173\u7684\u4fe1\u606f\uff0c\u4f8b\u5982\u5176\u5165\u53e3\u70b9\u5730\u5740\u3001\u56fe\u50cf\u5e93\u3001\u8282\u5bf9\u9f50\u548c\u5404\u79cd\u6570\u636e\u76ee\u5f55\u3002<\/p>\n

    \u8282\u6807\u9898<\/h3>\n

    \u5728\u53ef\u9009\u6807\u5934\u4e4b\u540e\uff0cPE \u6587\u4ef6\u6807\u5934\u540e\u9762\u662f\u8282\u6807\u5934\u7684\u96c6\u5408\u3002\u6bcf\u4e2a\u8282\u5934\u63cf\u8ff0\u53ef\u6267\u884c\u6587\u4ef6\u7684\u7279\u5b9a\u533a\u57df\uff0c\u5e76\u63d0\u4f9b\u6709\u5173\u5176\u865a\u62df\u5730\u5740\u3001\u5927\u5c0f\u548c\u7279\u5f81\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n

    \u53ef\u79fb\u690d\u53ef\u6267\u884c\uff08PE\uff09\u6587\u4ef6\u5934\u7684\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n

    \u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE) \u6587\u4ef6\u5934\u63d0\u4f9b\u4e86\u51e0\u4e2a\u6709\u52a9\u4e8e Windows \u53ef\u6267\u884c\u6587\u4ef6\u7684\u7a33\u5b9a\u6027\u548c\u6548\u7387\u7684\u5173\u952e\u529f\u80fd\u3002\u8fd9\u4e9b\u529f\u80fd\u5305\u62ec\uff1a<\/p>\n

      \n
    1. \n

      \u591a\u529f\u80fd\u6027<\/strong>\uff1aPE\u6587\u4ef6\u5934\u652f\u6301\u5404\u79cd\u67b6\u6784\uff0c\u5141\u8bb8\u5f00\u53d1\u4eba\u5458\u4e3a\u4e0d\u540c\u7684CPU\u5e73\u53f0\u521b\u5efa\u53ef\u6267\u884c\u6587\u4ef6\u3002<\/p>\n<\/li>\n

    2. \n

      \u52a8\u6001\u94fe\u63a5<\/strong>\uff1aPE \u6587\u4ef6\u5934\u4e2d\u7684\u5bfc\u5165\u548c\u5bfc\u51fa\u8868\u53ef\u5b9e\u73b0\u51fd\u6570\u7684\u52a8\u6001\u94fe\u63a5\uff0c\u4ece\u800c\u51cf\u5c11\u53ef\u6267\u884c\u6587\u4ef6\u7684\u5927\u5c0f\u5e76\u63d0\u9ad8\u4ee3\u7801\u7684\u53ef\u91cd\u7528\u6027\u3002<\/p>\n<\/li>\n

    3. \n

      \u865a\u62df\u5185\u5b58\u5bfb\u5740<\/strong>\uff1a\u6620\u50cf\u57fa\u5730\u5740\u548c\u91cd\u5b9a\u4f4d\u4fe1\u606f\u4f7f\u64cd\u4f5c\u7cfb\u7edf\u80fd\u591f\u5728\u4e0d\u540c\u7684\u5185\u5b58\u5730\u5740\u52a0\u8f7d\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u4ece\u800c\u6709\u6548\u5730\u5229\u7528\u865a\u62df\u5185\u5b58\u3002<\/p>\n<\/li>\n

    4. \n

      \u5b89\u5168<\/strong>\uff1aPE \u6807\u5934\u6821\u9a8c\u548c\u6709\u52a9\u4e8e\u5728\u52a0\u8f7d\u8fc7\u7a0b\u4e2d\u9a8c\u8bc1\u53ef\u6267\u884c\u6587\u4ef6\u7684\u5b8c\u6574\u6027\uff0c\u9632\u6b62\u6f5c\u5728\u7684\u7be1\u6539\u6216\u635f\u574f\u3002<\/p>\n<\/li>\n

    5. \n

      \u8c03\u8bd5\u652f\u6301<\/strong>\uff1aPE \u6807\u5934\u4e2d\u5305\u542b\u8c03\u8bd5\u4fe1\u606f\u6709\u52a9\u4e8e\u5f00\u53d1\u4eba\u5458\u8c03\u8bd5\u548c\u5206\u6790\u5176\u8f6f\u4ef6\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u7684\u7c7b\u578b<\/h2>\n

      \u6839\u636e\u76ee\u6807\u67b6\u6784\uff0c\u53ef\u79fb\u690d\u53ef\u6267\u884c\uff08PE\uff09\u6587\u4ef6\u5934\u53ef\u4ee5\u5206\u4e3a\u4e24\u79cd\u4e3b\u8981\u7c7b\u578b\uff1a<\/p>\n\n\n\n\n\n\n
      \u7c7b\u578b<\/th>\n\u5efa\u7b51\u5b66<\/th>\n<\/tr>\n<\/thead>\n
      PE32<\/td>\n32\u4f4d<\/td>\n<\/tr>\n
      PE32+<\/td>\n64\u4f4d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      PE32 \u6807\u5934\u7528\u4e8e 32 \u4f4d Windows \u53ef\u6267\u884c\u6587\u4ef6\uff0c\u800c PE32+ \u6807\u5934\u7528\u4e8e 64 \u4f4d Windows \u53ef\u6267\u884c\u6587\u4ef6\u3002\u533a\u522b\u5728\u4e8e\u67d0\u4e9b\u5b57\u6bb5\u7684\u5927\u5c0f\u4ee5\u53ca\u5b83\u4eec\u652f\u6301\u7684\u67b6\u6784\u7684\u529f\u80fd\u3002<\/p>\n

      \u4f7f\u7528\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u7684\u65b9\u6cd5\u3001\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h2>\n

      \u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE) \u6587\u4ef6\u5934\u5728 Windows \u53ef\u6267\u884c\u6587\u4ef6\u7684\u529f\u80fd\u4e2d\u8d77\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u5b83\u4f7f\u64cd\u4f5c\u7cfb\u7edf\u80fd\u591f\u6709\u6548\u5730\u52a0\u8f7d\u548c\u6267\u884c\u7a0b\u5e8f\u3002\u7136\u800c\uff0c\u5bf9 PE \u6587\u4ef6\u7684\u4e0d\u5f53\u5904\u7406\u6216\u5bf9\u6807\u5934\u7684\u4fee\u6539\u53ef\u80fd\u4f1a\u5bfc\u81f4\u5404\u79cd\u95ee\u9898\uff0c\u5305\u62ec\uff1a<\/p>\n

        \n
      1. \n

        \u517c\u5bb9\u6027\u95ee\u9898<\/strong>\uff1aPE \u6587\u4ef6\u5934\u4e2d\u7684\u9519\u8bef\u8bbe\u7f6e\uff08\u4f8b\u5982\u6620\u50cf\u57fa\u5730\u5740\uff09\u53ef\u80fd\u4f1a\u5bfc\u81f4\u5728\u4e0d\u540c\u7cfb\u7edf\u4e0a\u8fd0\u884c\u53ef\u6267\u884c\u6587\u4ef6\u65f6\u51fa\u73b0\u517c\u5bb9\u6027\u95ee\u9898\u3002<\/p>\n<\/li>\n

      2. \n

        \u5b89\u5168\u6f0f\u6d1e<\/strong>\uff1a\u7be1\u6539 PE \u6807\u5934\uff0c\u5c24\u5176\u662f\u5bfc\u5165\u548c\u5bfc\u51fa\u8868\uff0c\u53ef\u80fd\u4f1a\u5f15\u5165\u5b89\u5168\u6f0f\u6d1e\u5e76\u53ef\u80fd\u5bfc\u81f4\u4ee3\u7801\u6ce8\u5165\u653b\u51fb\u3002<\/p>\n<\/li>\n

      3. \n

        \u6267\u884c\u9519\u8bef<\/strong>\uff1aPE \u6807\u5934\u4e2d\u7684\u4fe1\u606f\u635f\u574f\u6216\u4e22\u5931\u53ef\u80fd\u4f1a\u5bfc\u81f4\u6267\u884c\u9519\u8bef\uff0c\u4ece\u800c\u963b\u6b62\u53ef\u6267\u884c\u6587\u4ef6\u6b63\u786e\u8fd0\u884c\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u4e3a\u4e86\u907f\u514d\u8fd9\u4e9b\u95ee\u9898\uff0c\u5f00\u53d1\u4eba\u5458\u5e94\u9075\u5faa\u6b63\u786e\u7684\u7f16\u7801\u5b9e\u8df5\uff0c\u907f\u514d\u5728\u7f16\u8bd1\u540e\u4fee\u6539PE\u6807\u5934\uff0c\u5e76\u4f7f\u7528\u4ee3\u7801\u7b7e\u540d\u7b49\u5b89\u5168\u63aa\u65bd\u6765\u786e\u4fdd\u53ef\u6267\u884c\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u548c\u771f\u5b9e\u6027\u3002<\/p>\n

        \u4e3b\u8981\u7279\u70b9\u53ca\u540c\u7c7b\u4ea7\u54c1\u6bd4\u8f83<\/h2>\n

        \u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u4e0e\u4e0d\u540c\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u4f7f\u7528\u7684\u5176\u4ed6\u53ef\u6267\u884c\u6587\u4ef6\u683c\u5f0f\u6709\u76f8\u4f3c\u4e4b\u5904\uff0c\u4f8b\u5982 Linux \u4e0a\u7684 ELF\uff08\u53ef\u6267\u884c\u548c\u53ef\u94fe\u63a5\u683c\u5f0f\uff09\u548c macOS \u4e0a\u7684 Mach-O\u3002\u7136\u800c\uff0c\u5b83\u4e5f\u5177\u6709\u4e0e\u4f17\u4e0d\u540c\u7684\u72ec\u7279\u7279\u5f81\uff1a<\/p>\n\n\n\n\n\n\n\n\n\n
        \u7279\u5f81<\/th>\n\u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE)<\/th>\n\u6781\u4f4e\u9891<\/th>\n\u9a6c\u8d6b-O<\/th>\n<\/tr>\n<\/thead>\n
        \u5e73\u53f0<\/td>\n\u89c6\u7a97<\/td>\nLinux\u3001\u7c7b Unix<\/td>\n\u82f9\u679c\u7cfb\u7edf<\/td>\n<\/tr>\n
        \u4e3b\u8981\u7528\u9014<\/td>\nWindows \u53ef\u6267\u884c\u6587\u4ef6<\/td>\nLinux \u53ef\u6267\u884c\u6587\u4ef6\u3001\u5171\u4eab\u5e93\u3001\u76ee\u6807\u6587\u4ef6<\/td>\nmacOS \u53ef\u6267\u884c\u6587\u4ef6\u3001\u52a8\u6001\u5e93<\/td>\n<\/tr>\n
        \u67b6\u6784\u652f\u6301<\/td>\nx86\u3001x64\u3001ARM \u7b49<\/td>\nx86\u3001x64\u3001ARM \u7b49<\/td>\nx86\u3001x64\u3001ARM \u7b49<\/td>\n<\/tr>\n
        \u6587\u4ef6\u5934\u7ed3\u6784<\/td>\nCOFF + \u53ef\u9009\u6807\u5934<\/td>\nELF \u5934<\/td>\n\u9a6c\u8d6b-O \u6807\u5934<\/td>\n<\/tr>\n
        \u5185\u5b58\u5bfb\u5740<\/td>\n\u865a\u62df\u5185\u5b58<\/td>\n\u865a\u62df\u5185\u5b58<\/td>\n\u865a\u62df\u5185\u5b58<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        \u5c3d\u7ba1\u5b58\u5728\u8fd9\u4e9b\u5dee\u5f02\uff0c\u6240\u6709\u8fd9\u4e9b\u53ef\u6267\u884c\u683c\u5f0f\u90fd\u670d\u52a1\u4e8e\u5305\u542b\u53ef\u6267\u884c\u4ee3\u7801\u548c\u6570\u636e\u7684\u57fa\u672c\u76ee\u7684\uff0c\u4f7f\u5b83\u4eec\u7279\u5b9a\u4e8e\u5e73\u53f0\uff0c\u4f46\u5bf9\u4e8e\u5404\u81ea\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u8f6f\u4ef6\u5f00\u53d1\u81f3\u5173\u91cd\u8981\u3002<\/p>\n

        \u4e0e\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u76f8\u5173\u7684\u89c2\u70b9\u548c\u672a\u6765\u6280\u672f<\/h2>\n

        \u53ef\u79fb\u690d\u53ef\u6267\u884c\u6587\u4ef6 (PE) \u6587\u4ef6\u5934\u7684\u6f14\u53d8\u4e0e Windows \u7684\u53d1\u5c55\u548c\u8ba1\u7b97\u6280\u672f\u7684\u53d8\u5316\u5bc6\u5207\u76f8\u5173\u3002\u968f\u7740\u6280\u672f\u7684\u4e0d\u65ad\u8fdb\u6b65\uff0cPE \u683c\u5f0f\u53ef\u80fd\u4f1a\u8fdb\u4e00\u6b65\u6539\u8fdb\uff0c\u4ee5\u9002\u5e94\u65b0\u7684\u67b6\u6784\u3001\u589e\u5f3a\u5b89\u5168\u6027\u5e76\u4f18\u5316\u6027\u80fd\u3002<\/p>\n

        \u4e0e PE \u6587\u4ef6\u5934\u76f8\u5173\u7684\u4e00\u4e9b\u6f5c\u5728\u7684\u672a\u6765\u6280\u672f\u548c\u8fdb\u6b65\u5305\u62ec\uff1a<\/p>\n

          \n
        1. \n

          \u5bf9\u65b0\u67b6\u6784\u7684\u652f\u6301<\/strong>\uff1a\u968f\u7740\u8ba1\u7b97\u7684\u53d1\u5c55\uff0c\u53ef\u80fd\u4f1a\u51fa\u73b0\u65b0\u7684 CPU \u67b6\u6784\uff0c\u5e76\u4e14\u53ef\u4ee5\u6269\u5c55 PE \u683c\u5f0f\u4ee5\u652f\u6301\u8fd9\u4e9b\u67b6\u6784\uff0c\u4ee5\u8ddf\u4e0a\u6280\u672f\u8fdb\u6b65\u3002<\/p>\n<\/li>\n

        2. \n

          \u589e\u5f3a\u7684\u5b89\u5168\u673a\u5236<\/strong>\uff1a\u968f\u7740\u5bf9\u7f51\u7edc\u5b89\u5168\u7684\u6301\u7eed\u5173\u6ce8\uff0c\u672a\u6765\u7684 PE \u6587\u4ef6\u5934\u53ef\u80fd\u4f1a\u5305\u542b\u66f4\u5f3a\u5927\u7684\u5b89\u5168\u529f\u80fd\uff0c\u4f8b\u5982\u9ad8\u7ea7\u4ee3\u7801\u7b7e\u540d\u548c\u52a0\u5bc6\u6280\u672f\u3002<\/p>\n<\/li>\n

        3. \n

          \u63d0\u9ad8\u6027\u80fd<\/strong>\uff1a\u4f18\u5316\u52a0\u8f7d\u548c\u6267\u884c\u65f6\u95f4\u7684\u52aa\u529b\u53ef\u80fd\u4f1a\u5bfc\u81f4 PE \u6587\u4ef6\u5934\u7684\u4fee\u6539\uff0c\u4ece\u800c\u7b80\u5316\u6d41\u7a0b\u5e76\u51cf\u5c11\u5f00\u9500\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u5173\u8054<\/h2>\n

          \u4ee3\u7406\u670d\u52a1\u5668\u5728\u7f51\u7edc\u901a\u4fe1\u4e2d\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\uff0c\u5145\u5f53\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u4e2d\u4ecb\u3002\u867d\u7136\u4ee3\u7406\u670d\u52a1\u5668\u4e3b\u8981\u5904\u7406\u7f51\u7edc\u6d41\u91cf\uff0c\u4f46\u5b83\u4eec\u4e5f\u53ef\u80fd\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u4e0e\u53ef\u6267\u884c\u6587\u4ef6\uff08\u5305\u62ec PE \u6587\u4ef6\u5934\uff09\u8fdb\u884c\u4ea4\u4e92\uff1a<\/p>\n

            \n
          1. \n

            \u5185\u5bb9\u8fc7\u6ee4<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u68c0\u67e5 PE \u6587\u4ef6\u5934\u4ee5\u5b9e\u65bd\u5185\u5bb9\u8fc7\u6ee4\u7b56\u7565\uff0c\u6839\u636e\u5176\u7279\u5f81\u963b\u6b62\u7279\u5b9a\u53ef\u6267\u884c\u6587\u4ef6\u7684\u4e0b\u8f7d\u6216\u6267\u884c\u3002<\/p>\n<\/li>\n

          2. \n

            \u5b89\u5168\u626b\u63cf<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u626b\u63cfPE\u6587\u4ef6\u5934\u548c\u5185\u5bb9\u4e2d\u662f\u5426\u5b58\u5728\u6076\u610f\u8f6f\u4ef6\u548c\u75c5\u6bd2\uff0c\u4fdd\u62a4\u5ba2\u6237\u7aef\u7f51\u7edc\u514d\u53d7\u6f5c\u5728\u5a01\u80c1\u3002<\/p>\n<\/li>\n

          3. \n

            \u7f13\u5b58\u548c\u52a0\u901f<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u7f13\u5b58 PE \u6587\u4ef6\uff0c\u51cf\u5c11\u4e0b\u8f7d\u65f6\u95f4\u5e76\u63d0\u9ad8\u5ba2\u6237\u7aef\u7684\u5e94\u7528\u7a0b\u5e8f\u52a0\u8f7d\u901f\u5ea6\u3002<\/p>\n<\/li>\n

          4. \n

            \u8d1f\u8f7d\u5747\u8861<\/strong>\uff1a\u5982\u679c\u5e94\u7528\u7a0b\u5e8f\u5206\u5e03\u5728\u591a\u4e2a\u670d\u52a1\u5668\u4e0a\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u4f7f\u7528 PE \u6587\u4ef6\u5934\u4e2d\u7684\u4fe1\u606f\u6765\u667a\u80fd\u5730\u5bf9\u8bf7\u6c42\u8fdb\u884c\u8d1f\u8f7d\u5e73\u8861\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u76f8\u5173\u94fe\u63a5<\/h2>\n

            \u6709\u5173\u53ef\u79fb\u690d\u53ef\u6267\u884c (PE) \u6587\u4ef6\u5934\u548c\u76f8\u5173\u4e3b\u9898\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

              \n
            1. Microsoft PE \u548c COFF \u89c4\u8303<\/a><\/li>\n
            2. \u53ef\u6267\u884c\u548c\u53ef\u94fe\u63a5\u683c\u5f0f (ELF)<\/a><\/li>\n
            3. Mach-O \u6587\u4ef6\u683c\u5f0f<\/a><\/li>\n<\/ol>\n
              \n

              \u8bf7\u6ce8\u610f\uff0c\u672c\u6587\u4ec5\u7528\u4e8e\u6559\u80b2\u548c\u4fe1\u606f\u76ee\u7684\uff0c\u53ef\u80fd\u65e0\u6cd5\u5b8c\u5168\u53cd\u6620 2021 \u5e74 9 \u6708\u77e5\u8bc6\u622a\u6b62\u65e5\u671f\u4e4b\u540e\u7684\u6700\u65b0\u8fdb\u5c55\u3002<\/p>","protected":false},"featured_media":469191,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478479","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Portable Executable (PE) File Header: An Overview<\/mark>","faq_items":[{"question":"What is the Portable Executable (PE) File Header?","answer":"

              The Portable Executable (PE) File Header is a crucial component of the Microsoft Windows operating system. It serves as a fundamental structure in the Windows Portable Executable file format, containing essential information about the executable, such as architecture, entry point, and sections.<\/p>"},{"question":"How did the PE File Header originate?","answer":"

              The concept of the PE File Header can be traced back to the early development of Windows operating systems. It was introduced in Windows NT 3.1 in 1993 as a replacement for the older New Executable (NE) format used in 16-bit Windows versions.<\/p>"},{"question":"What does the PE File Header include?","answer":"

              The PE File Header includes a magic number, architecture information, timestamp, entry point address, image base address, section details, import\/export tables, relocation data, checksum, and debugging information.<\/p>"},{"question":"How does the PE File Header work?","answer":"

              The PE File Header provides crucial information to the operating system, enabling it to load and execute the program correctly. It contains details about the executable's layout, dependencies, and memory addressing, facilitating efficient execution.<\/p>"},{"question":"What are the key features of the PE File Header?","answer":"

              The PE File Header offers versatility, dynamic linking, virtual memory addressing, security through checksums, and support for debugging, enhancing the stability and performance of Windows executables.<\/p>"},{"question":"What types of PE File Headers exist?","answer":"

              There are two main types: PE32 for 32-bit Windows executables and PE32+ for 64-bit Windows executables. These headers differ in certain fields and cater to specific architectures.<\/p>"},{"question":"How can proxy servers interact with PE File Headers?","answer":"

              Proxy servers can use PE File Headers for content filtering, security scanning, caching, acceleration, and load balancing in network communication, enhancing client experiences.<\/p>"},{"question":"What are the potential future technologies related to PE File Headers?","answer":"

              Future technologies may involve support for new architectures, enhanced security mechanisms, and improved performance to keep up with evolving computing trends.<\/p>"},{"question":"How does the PE File Header compare to other executable file formats?","answer":"

              The PE File Header is specific to Windows and differs from executable formats like ELF on Linux and Mach-O on macOS in terms of platform, architecture support, and file header structure.<\/p>"},{"question":"What are some common problems related to PE File Headers and their solutions?","answer":"

              Problems may include compatibility issues, security vulnerabilities, and execution errors. Developers can address these by following best practices, avoiding header modifications, and implementing security measures like code signing.<\/p>

              Please note that the answers provided here are brief summaries. For more in-depth information, refer to the corresponding sections in the main article.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478479\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/469191"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=478479"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}