{"id":141,"date":"2010-04-17T23:14:43","date_gmt":"2010-04-18T08:14:43","guid":{"rendered":"\/blog\/?p=141"},"modified":"2023-09-21T09:39:20","modified_gmt":"2023-09-21T00:39:20","slug":"pe-%ed%8c%8c%ec%9d%bc%ed%8f%ac%eb%a7%b7","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=141","title":{"rendered":"PE \ud30c\uc77c\ud3ec\ub9f7"},"content":{"rendered":"\n\uac1c\uc694 \n<P>&nbsp;\uc708\ub3c4\uc6b0 \uc2dc\uc2a4\ud15c \ud504\ub85c\uadf8\ub798\ubc0d\ud55c\ub2e4\ub294 \uc0ac\ub78c\uce58\uace0 PE \ud30c\uc77c\uc5d0 \ub300\ud574\uc11c \ubaa8\ub974\ub294 \uc0ac\ub78c\uc740 \uc544\ub9c8 \uac70\uc758 \uc5c6\uc744 \uac83\uc774\ub2e4. \uc708\ub3c4\uc6b0 \uc2e4\ud589 \ud30c\uc77c \ubc0f DLL, \uadf8\ub9ac\uace0 \ub4dc\ub77c\uc774\ubc84 \ud30c\uc77c\uae4c\uc9c0\ub3c4 PE \ud30c\uc77c \ud615\ud0dc\ub97c \ub530\ub974\uace0 \uc788\uc73c\ub2c8 \ubb58 \ud574\ub3c4 \ub530\ub77c\ub2e4\ub2c8\ub294\uac8c \uc774 PE(Portable Executable) \ud30c\uc77c \ud3ec\ub9f7\uc774\ub2c8\uae4c \ub9d0\uc774\ub2e4. PE \ud30c\uc77c \ud3ec\ub9f7\uc740 \ud06c\uac8c \ud5e4\ub354, \uc139\uc158, \ub370\uc774\ud130\uc758 \uc138\ubd80\ubd84\uc73c\ub85c \ub098\ub258\ub294\ub370 \uae30\uc874 DOS \uc2dc\uc808 \uc0ac\uc6a9\ud558\ub358 COFF(Common Object File Format)\uacfc \uac70\uc758 \ube44\uc2b7\ud55c \uad6c\uc870\ub97c \uac00\uc9c0\uba70 \uae30\ubcf8 \ubf08\ub300\uc5d0\uc11c \ud655\uc7a5\ub41c \ub4ef\ud55c \ud615\ud0dc\ub97c \uac00\uc9c4\ub2e4.<\/P>\n<P>&nbsp;PE \uc2e4\ud589\ud30c\uc77c\uc774 \uac00\uc9c0\uace0 \uc788\ub294 \ud5e4\ub354\ub97c \ubd84\uc11d\ud568\uc73c\ub85c\uc368 \uc2e4\uc81c \ub370\uc774\ud130\uac00 \uc788\ub294 \uc704\uce58\ub97c \ud30c\uc77c\uc5d0\uc11c \ucc3e\uace0 \ud574\ub2f9 \uc601\uc5ed\uc744 \ubd84\uc11d\ud560 \uc218 \uc788\ub2e4.<\/P>\n<P>&nbsp;PE \ud30c\uc77c \uad6c\uc870\uc5d0 \ub300\ud574\uc11c \uc790\uc138\ud788 \uc54c\uc544\ubcf4\uae30 \uc804\uc5d0 \ucc38\uace0\ud560 \uc88b\uc740 \ud504\ub85c\uadf8\ub7a8 \uba87\uac00\uc9c0\ub97c \uc18c\uac1c\ud55c\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>PE Explorer<\/STRONG> : &nbsp;\uc720\ub8cc\ub2e4. \u3161,.\u3161;;; \uacf5\uc9dc \ubc84\uc804\ub3c4 \uc788\ub294\ub370 30\uc77c \ud55c\uc815\uc774\ub77c\uc11c... \uadf8\ub807\uc9c0\ub9cc \uac15\ub825\ud558\ub2e4 @0@)\/~ \n<LI><STRONG>PE Browser<\/STRONG> : \uacf5\uc9dc\ub2e4. \ud558\uc9c0\ub9cc \uc5ed\uc2dc \ubb54\uac00 \ubd80\uc871\ud558\ub2e4\ub294 \uac70... \uadf8\ub0e5 \uc4f0\uae30\uc5d0\ub294 \uad1c\ucc2e\ub2e4. <\/LI><\/UL><br \/>\n<P>&nbsp;\uc55e\uc73c\ub85c <STRONG>Relative Virtual Address(RVA)<\/STRONG>\ub77c\ub294 \uc6a9\uc5b4\uac00 \ub9ce\uc774 \ub098\uc62c\ud150\ub370, \uc7a0\uae50 \uc54c\uc544\ubcf4\uc790.<\/P>\n<P>&nbsp;RVA\ub294 \uc2e4\ud589\ud30c\uc77c\uc774 \uba54\ubaa8\ub9ac\uc5d0 \ub85c\ub4dc\ub418\uc5c8\uc744 \ub54c, \uadf8 \uc2dc\uc791 \uc8fc\uc18c\ub97c 0\uc73c\ub85c \uc0dd\uac01\ud558\uace0 \uacc4\uc0b0\ud558\ub294 \uc8fc\uc18c\uc774\ub2e4. \uc989 RVA\uc758 \uac12\uc774 0x40 \uc774\uace0 \uc2e4\ud589\ud30c\uc77c\uc774 \ub85c\ub4dc\ub418\uc5c8\uc744 \ub54c, \uadf8 \uc2dc\uc791\uc704\uce58\uac00 0x1000 \uc774\ub77c\uba74 \uc2e4\uc81c \uadf8 \uc601\uc5ed\uc774 \uba54\ubaa8\ub9ac\uc5d0 \ub85c\ub4dc\ub418\uc5c8\uc744 \ub54c \uc704\uce58\ub294 0x1040\uc774 \ub41c\ub2e4. \uc2e4\ud589\ud30c\uc77c \uc2dc\uc791 \uc704\uce58\ub97c 0\uc73c\ub85c \ud558\ub294 \uc0c1\ub300\uc801 \uc8fc\uc18c\ub77c\ub294 \uac83\ub9cc \uc54c\uba74 \uac19\ub2e8\ud558\ub2e4. \ub4a4\uc5d0 \uc124\uba85\ud558\uba74\uc11c \uacc4\uc18d \uc0ac\uc6a9\ub420 \uc6a9\uc5b4\uc774\ubbc0\ub85c \uc54c\uc544\ub450\uc790.<\/P>\n<P> \n<DIV style=\"TEXT-ALIGN: center; CLEAR: both\" class=\"imageblock center\"><IMG style=\"CURSOR: pointer\" onclick=\"popview(this, '90000003_000000000000000DFC1EB00A')\" src=\"http:\/\/cfs4.tistory.com\/image\/1\/tistory\/2008\/03\/26\/03\/02\/47e93e18e3cae\" width=500 height=330><\/DIV>\n<br \/><br \/><br \/>\n<H2>PE \ud30c\uc77c \ud3ec\ub9f7 \uc804\uccb4 \uad6c\uc870<\/H2>\n<P>&nbsp;PE \ud30c\uc77c \ud3ec\ub9f7\uc740 \ud06c\uac8c \uc544\ub798\uc640 \uac19\uc774 \uad6c\uc131\ub41c\ub2e4.<\/P><br \/>\n<P style=\"TEXT-ALIGN: center\">&nbsp;<IMG style=\"CURSOR: pointer\" id=userImg4587488 onclick=\"popview(this, '90000003_000000000000000DFC1EB00A')\" src=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/167707\" onload='setTimeout(\"resizeImage(4587488)\",200)'><\/P><br \/>\n<P>&nbsp;\uc704\uc5d0\uc11c \ubcf4\ub294 \uac83\uacfc \uac19\uc774 \ud06c\uac8c\ub294 \ubd89\uc740 \uc0c9 \ubd80\ubd84\uacfc &nbsp;\ud478\ub978\uc0c9 \ubd80\ubd84\uc73c\ub85c \ub098\ub20c \uc218 \uc788\ub2e4. \ubd89\uc740 \uc0c9 \ubd80\ubd84\uc740 \ud5e4\ub354\ub098 \ub370\uc774\ud130\uac00 \uc704\uce58\ud558\ub294 \uc601\uc5ed\uc758 \uc18d\uc131\uacfc \ud06c\uae30 \ub4f1\ub4f1\uc744 \ub098\ud0c0\ub0b4\ub294 \uc815\ubcf4\uc774\uace0, \ud478\ub978 \uc0c9 \ubd80\ubd84\uc740 \uc2e4\uc81c \ub370\uc774\ud130\ub4e4\uc774 \uc704\uce58\ud558\ub294 \uc601\uc5ed\uc744 \ub098\ud0c0\ub0b8\ub2e4.<\/P><br \/>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>IMAGE_DOS_HEADER<\/STRONG> : PE \ud30c\uc77c\uc758 \ucc98\uc74c\uc5d0 \uc704\uce58\ud558\uba70 \ub4b7\ubd80\ubd84\uc5d0 DOS\uc5d0\uc11c \uc2e4\ud589\ud588\uc744 \ub54c, &nbsp;<STRONG>\uc5d0\ub7ec \uba54\uc2dc\uc9c0<\/STRONG>(<STRONG>This program cannot be run in DOS mode<\/STRONG>)\ub97c \ud45c\uc2dc\ud558\ub294 \uc2a4\ud141(Stub) \ucf54\ub4dc\ub97c \ud3ec\ud568\ud558\uace0 \uc788\uc74c. MAGIC Number\uc640 \ub2e4\uc74c\uc5d0 \uc624\ub294 IMAGE_NT_HEADER\uc758 \uc704\uce58\ub97c \ud45c\uc2dc \n<LI><STRONG>IMAGE_NT_HEADER<\/STRONG> : PE \ud30c\uc77c \ud3ec\ub9f7\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \ud3ec\ud568. \uc544\ub798\uc758 \ub450 \ubd80\ubd84\uc73c\ub85c \uad6c\uc131&nbsp; \n<UL>\n<LI>IMAGE_FILE_HEADER :&nbsp; Section\uc758 \uc218 \ubc0f \uc18d\uc131\uacfc \uac19\uc740 \uc815\ubcf4 \ud3ec\ud568 \n<LI>IMAGE_OPTIONAL_HEADER : PE \ud30c\uc77c\uc5d0 \ub300\ud55c \uc18d\uc131 \ub610\ub294 \uc774\ubbf8\uc9c0 \ubca0\uc774\uc2a4\uc640 \uac19\uc740 \uc815\ubcf4 \ud3ec\ud568 \n<UL>\n<LI>Data Directory : \uc5b4\ub5a4 \uc601\uc5ed\uc758 Virtual Address\uc640 Size \uc815\ubcf4\ub97c \ud3ec\ud568 <\/LI><\/UL><\/LI><\/UL>\n<LI><STRONG>IMAGE_SECTION_HEADER<\/STRONG> : \uc139\uc158\uc5d0 \ub300\ud55c \uc2e4\uc9c8\uc801\uc778 \uc815\ubcf4\ub97c \ud3ec\ud568 \n<LI><STRONG>Section(\uc139\uc158)<\/STRONG> : \uc2e4\uc81c \ub370\uc774\ud130\uac00 \uc704\uce58\ud558\ub294 \uc601\uc5ed <\/LI><\/UL><br \/>\n<P>&nbsp;\uac01 \uc601\uc5ed\uc5d0 \ub300\ud574 \uc138\ubd80\uc801\uc73c\ub85c \uc54c\uc544\ubcf4\uc790.<\/P><br \/>\n<H2>IMAGE_DOS_HEADER<\/H2>\n<P>&nbsp;IMAGE_DOS_HEADER\ub294 PE \uc2e4\ud589\ud30c\uc77c \uccab\ubd80\ubd84\uc5d0 \uc704\uce58\ud558\uba70 \uc544\ub798\uc640 \uac19\uc774 WinNT.h\uc5d0 \uc815\uc758\ub418\uc5b4 \uc788\ub2e4.<\/P>\n<OL class=code>\n<LI><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DOS_SIGNATURE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x4D5A &nbsp; &nbsp;&nbsp; \/\/ MZ<br \/><\/SPAN><\/STRONG>#define IMAGE_OS2_SIGNATURE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x4E45 &nbsp; &nbsp;&nbsp; \/\/ NE<br \/>#define IMAGE_OS2_SIGNATURE_LE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x4C45 &nbsp; &nbsp;&nbsp; \/\/ LE<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_NT_SIGNATURE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x50450000&nbsp; \/\/ PE00<\/SPAN><\/STRONG> \n<LI>typedef struct _IMAGE_DOS_HEADER { &nbsp; &nbsp;&nbsp; \/\/ DOS .EXE header<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">WORD &nbsp; e_magic; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; \/\/ Magic number &lt;MZ&gt;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; WORD &nbsp; e_cblp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Bytes on last page of file<br \/>&nbsp; &nbsp; WORD &nbsp; e_cp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Pages in file<br \/>&nbsp; &nbsp; WORD &nbsp; e_crlc; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Relocations<br \/>&nbsp; &nbsp; WORD &nbsp; e_cparhdr; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; \/\/ Size of header in paragraphs<br \/>&nbsp; &nbsp; WORD &nbsp; e_minalloc; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Minimum extra paragraphs needed<br \/>&nbsp; &nbsp; WORD &nbsp; e_maxalloc; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Maximum extra paragraphs needed<br \/>&nbsp; &nbsp; WORD &nbsp; e_ss; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Initial (relative) SS value<br \/>&nbsp; &nbsp; WORD &nbsp; e_sp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Initial SP value<br \/>&nbsp; &nbsp; WORD &nbsp; e_csum; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Checksum<br \/>&nbsp; &nbsp; WORD &nbsp; e_ip; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Initial IP value<br \/>&nbsp; &nbsp; WORD &nbsp; e_cs; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Initial (relative) CS value<br \/>&nbsp; &nbsp; WORD &nbsp; e_lfarlc; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ File address of relocation table<br \/>&nbsp; &nbsp; WORD &nbsp; e_ovno; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Overlay number<br \/>&nbsp; &nbsp; WORD &nbsp; e_res[4]; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Reserved words<br \/>&nbsp; &nbsp; WORD &nbsp; e_oemid; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; \/\/ OEM identifier (for e_oeminfo)<br \/>&nbsp; &nbsp; WORD &nbsp; e_oeminfo; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; \/\/ OEM information; e_oemid specific<br \/>&nbsp; &nbsp; WORD &nbsp; e_res2[10]; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ Reserved words<br \/>&nbsp; &nbsp; <SPAN style=\"COLOR: #ff0000\"><STRONG>LONG &nbsp; e_lfanew; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; \/\/ File address of new exe header<\/STRONG><br \/><\/SPAN>&nbsp; } IMAGE_DOS_HEADER, *PIMAGE_DOS_HEADER; <\/LI><\/OL>\n<P>&nbsp; \ud06c\uac8c \uc8fc\uc758\ud574\uc11c \ubcfc \ubd80\ubd84\uc740 \uc2e4\ud589\ud30c\uc77c\uc778\uc9c0 \ud310\ub2e8\ud558\ub294\ub370 \uc0ac\uc6a9\ub418\ub294 <STRONG>e_magic<\/STRONG> \ubd80\ubd84\uacfc \ub2e4\uc74c\uc5d0 \uc624\ub294 <STRONG>IMAGE_NT_HEADER<\/STRONG>\uc758 \uc704\uce58\ub97c \ud45c\uc2dc\ud574 \uc8fc\ub294 <STRONG>e_lfanew<\/STRONG> \ubd80\ubd84\uc774\ub2e4. \ub2e4\ub978 \ubd80\ubd84\uc740 \ud06c\uac8c \uc911\uc694\ud55c \uc815\ubcf4\ub97c \uac00\uc9c0\uace0 \uc788\uc9c0 \uc54a\uc73c\ub2c8 \uc77c\ub2e8 \ud328\uc2a4~<\/P><br \/>\n<H2>IMAGE_NT_HEADER<\/H2>\n<P>&nbsp;IMAGE_NT_HEADER\ub294 \uc2e4\uc81c PE \ud30c\uc77c \ud3ec\ub9f7\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \ud3ec\ud568\ud558\ub294 \ud5e4\ub354\ub85c\uc368 IMAGE_FILE_HEADER\uc640 IMAGE_OPTIONAL_HEADER\ub85c \uad6c\uc131\ub41c\ub2e4.<\/P>\n<OL class=code>\n<LI>typedef struct _IMAGE_NT_HEADERS {<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD Signature; &lt;PE00&gt;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; IMAGE_FILE_HEADER FileHeader;<br \/>&nbsp; &nbsp; IMAGE_OPTIONAL_HEADER32 OptionalHeader;<br \/>} IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32; <\/LI><\/OL><br \/>\n<P>&nbsp;IMAGE_NT_HEADER\ub294 \uc704\uc640 \uac19\uc774 Signature\uc640 File \ud5e4\ub354, \uadf8\ub9ac\uace0 Optional Header\ub85c \uad6c\uc131\ub418\uc5b4\uc788\ub2e4. Signature\ub294 <STRONG><SPAN style=\"COLOR: #0000ff\">IMAGE_NT_SIGNATURE<\/SPAN><\/STRONG> \ub85c &lt;PE00&gt;\uc758 \uac12\uc744 \uac00\uc9c4\ub2e4. \uadf8\ub7fc \uccab\ubc88\uc9f8\uc5d0 \ud574\ub2f9\ud558\ub294 FileHeader\ub97c \uc54c\uc544\ubcf4\uc790.<\/P><br \/>\n<H3>IMAGE_FILE_HEADER<\/H3>\n<OL class=code>\n<LI>typedef struct _IMAGE_FILE_HEADER {<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; Machine;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #ff0000\">WORD &nbsp;&nbsp; NumberOfSections;<\/SPAN><\/STRONG><br \/>&nbsp; &nbsp; DWORD &nbsp; TimeDateStamp;<br \/>&nbsp; &nbsp; DWORD &nbsp; PointerToSymbolTable;<br \/>&nbsp; &nbsp; DWORD &nbsp; NumberOfSymbols;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">WORD &nbsp;&nbsp; SizeOfOptionalHeader;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; WORD &nbsp;&nbsp; Characteristics;<br \/>} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER; <\/LI><\/OL><br \/>\n<P>&nbsp;IMAGE_FILE_HEADER\ub294 \uc704\uc640 \uac19\uc774 \uad6c\uc131\ub41c\ub2e4. \uac01 \ud56d\ubaa9\uc5d0 \ub300\ud574\uc11c \uc54c\uc544\ubcf4\uba74 \uc544\ub798\uc640 \uac19\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>Machine<\/STRONG> : CPU ID\ub97c \ub098\ud0c0\ub0b4\ub294\ub370, \uac04\ub2e8\ud788 \ubcf4\uba74 Intel \uc778\uc9c0, MIPS \uc778\uc9c0 \ub4f1\ub4f1\uc758 \uc815\ubcf4\uac00 \ub4e4\uc5b4\uc788\uc74c \n<LI><STRONG>NumberOfSections<\/STRONG> : PE \ud30c\uc77c\uc5d0 \ud3ec\ud568\ub41c \ucd1d \uc139\uc158\uc758 \uc218\ub97c \ub098\ud0c0\ub0c4 \n<LI><STRONG>TimeDateStamp<\/STRONG> : \ucef4\ud30c\uc77c\ub7ec \ub610\ub294 \ub9c1\ucee4\uac00 \ud30c\uc77c\uc744 \uc0dd\uc131\ud55c \uc2dc\uac04. 1970\ub144 1\uc6d4 1\uc77c GMT \uae30\uc900\uc73c\ub85c \uc9c0\ub098\uc628 \ucd08 \n<LI><STRONG>PointerToSymbolTable<\/STRONG> : &nbsp;COFF \ud30c\uc77c\uc758 \uc2ec\ubcfc \ud14c\uc774\ube14\uc758 \uc624\ud504\uc14b\uc744 \ub098\ud0c0\ub0c4. \uc5c6\ub294 \uacbd\uc6b0\uac00 \ub300\ubd80\ubd84 \n<LI><STRONG>NumberOfSymbols<\/STRONG> : \uc2ec\ubcfc\uc758 \uac1c\uc218\ub97c \ub098\ud0c0\ub0c4 \n<LI><STRONG>SizeOfOptionalHeader<\/STRONG> : \ub4a4\uc5d0 \uc774\uc5b4\uc11c \ub098\uc624\ub294 Optional Header\uc758 \ud06c\uae30\ub97c \ub098\ud0c0\ub0b8\ub2e4. 32Bit\/64Bit\uc5d0 \ub530\ub77c\uc11c \uadf8 \ud06c\uae30\uac00 \ub2e4\ub984 \n<LI><STRONG>Characteristics<\/STRONG> : \ud30c\uc77c\uc758 \ud2b9\uc131 <\/LI><\/UL><br \/>\n<P>&nbsp;Machine\uc5d0 \ub300\ud55c \ub9e4\ud06c\ub85c\ub294 WinNT.h\uc5d0 \uc815\uc758\ub418\uc5b4\uc788\ub294\ub370 \uc544\ub798\uc640 \uac19\ub2e4. Intel32 or Intel64\uac00 \ub300\ubd80\ubd84\uc77c\ud14c\ub2c8\uae4c \uc704\uc758 \ud30c\ub780\uc0c9\ub9cc \ubcf4\uba74 \ub420\uac83 \uac19\ub2e4.<\/P>\n<OL class=code>\n<LI>#define IMAGE_FILE_MACHINE_UNKNOWN &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_FILE_MACHINE_I386 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x014c&nbsp; \/\/ Intel 386.<br \/><\/SPAN><\/STRONG>#define IMAGE_FILE_MACHINE_R3000 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0162&nbsp; \/\/ MIPS little-endian, 0x160 big-endian<br \/>#define IMAGE_FILE_MACHINE_R4000 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0166&nbsp; \/\/ MIPS little-endian<br \/>#define IMAGE_FILE_MACHINE_R10000 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x0168&nbsp; \/\/ MIPS little-endian<br \/>#define IMAGE_FILE_MACHINE_WCEMIPSV2 &nbsp; &nbsp; &nbsp; &nbsp; 0x0169&nbsp; \/\/ MIPS little-endian WCE v2<br \/>#define IMAGE_FILE_MACHINE_ALPHA &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0184&nbsp; \/\/ Alpha_AXP<br \/>#define IMAGE_FILE_MACHINE_SH3 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01a2&nbsp; \/\/ SH3 little-endian<br \/>#define IMAGE_FILE_MACHINE_SH3DSP &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x01a3<br \/>#define IMAGE_FILE_MACHINE_SH3E &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x01a4&nbsp; \/\/ SH3E little-endian<br \/>#define IMAGE_FILE_MACHINE_SH4 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01a6&nbsp; \/\/ SH4 little-endian<br \/>#define IMAGE_FILE_MACHINE_SH5 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01a8&nbsp; \/\/ SH5<br \/>#define IMAGE_FILE_MACHINE_ARM &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01c0&nbsp; \/\/ ARM Little-Endian<br \/>#define IMAGE_FILE_MACHINE_THUMB &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01c2<br \/>#define IMAGE_FILE_MACHINE_AM33 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x01d3<br \/>#define IMAGE_FILE_MACHINE_POWERPC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x01F0&nbsp; \/\/ IBM PowerPC Little-Endian<br \/>#define IMAGE_FILE_MACHINE_POWERPCFP &nbsp; &nbsp; &nbsp; &nbsp; 0x01f1<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_FILE_MACHINE_IA64 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x0200&nbsp; \/\/ Intel 64<br \/><\/SPAN><\/STRONG>#define IMAGE_FILE_MACHINE_MIPS16 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x0266&nbsp; \/\/ MIPS<br \/>#define IMAGE_FILE_MACHINE_ALPHA64 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0284&nbsp; \/\/ ALPHA64<br \/>#define IMAGE_FILE_MACHINE_MIPSFPU &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0366&nbsp; \/\/ MIPS<br \/>#define IMAGE_FILE_MACHINE_MIPSFPU16 &nbsp; &nbsp; &nbsp; &nbsp; 0x0466&nbsp; \/\/ MIPS<br \/>#define IMAGE_FILE_MACHINE_AXP64 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IMAGE_FILE_MACHINE_ALPHA64<br \/>#define IMAGE_FILE_MACHINE_TRICORE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0520&nbsp; \/\/ Infineon<br \/>#define IMAGE_FILE_MACHINE_CEF &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0CEF<br \/>#define IMAGE_FILE_MACHINE_EBC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0EBC&nbsp; \/\/ EFI Byte Code<br \/>#define IMAGE_FILE_MACHINE_AMD64 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x8664&nbsp; \/\/ AMD64 (K8)<br \/>#define IMAGE_FILE_MACHINE_M32R &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x9041&nbsp; \/\/ M32R little-endian<br \/>#define IMAGE_FILE_MACHINE_CEE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0xC0EE <\/LI><\/OL><br \/>\n<P>&nbsp;\ub2e4\uc74c\uc740 Characteristics\uc5d0 \ub300\ud55c \ubd80\ubd84\uc778\ub370 WinNT.h\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \uc815\uc758\ub418\uc5b4\uc788\ub2e4. \uc5ed\uc2dc\ub098 \ud30c\ub780\uc0c9 \ubd80\ubd84\ub9cc \ubcf4\uba74 \ub420 \uac83 \uac19\ub2e4.<\/P>\n<OL class=code>\n<LI>#define IMAGE_FILE_RELOCS_STRIPPED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0001&nbsp; \/\/ Relocation info stripped from file.<br \/>#define IMAGE_FILE_EXECUTABLE_IMAGE &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x0002&nbsp; \/\/ File is executable&nbsp; (i.e. no unresolved externel references).<br \/>#define IMAGE_FILE_LINE_NUMS_STRIPPED &nbsp; &nbsp; &nbsp;&nbsp; 0x0004&nbsp; \/\/ Line nunbers stripped from file.<br \/>#define IMAGE_FILE_LOCAL_SYMS_STRIPPED &nbsp; &nbsp; &nbsp; 0x0008&nbsp; \/\/ Local symbols stripped from file.<br \/>#define IMAGE_FILE_AGGRESIVE_WS_TRIM &nbsp; &nbsp; &nbsp; &nbsp; 0x0010&nbsp; \/\/ Agressively trim working set<br \/>#define IMAGE_FILE_LARGE_ADDRESS_AWARE &nbsp; &nbsp; &nbsp; 0x0020&nbsp; \/\/ App can handle &gt;2gb addresses<br \/>#define IMAGE_FILE_BYTES_REVERSED_LO &nbsp; &nbsp; &nbsp; &nbsp; 0x0080&nbsp; \/\/ Bytes of machine word are reversed.<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_FILE_32BIT_MACHINE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x0100&nbsp; \/\/ 32 bit word machine.<br \/><\/SPAN><\/STRONG>#define IMAGE_FILE_DEBUG_STRIPPED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x0200&nbsp; \/\/ Debugging info stripped from file in .DBG file<br \/>#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP &nbsp; 0x0400&nbsp; \/\/ If Image is on removable media, copy and run from the swap file.<br \/>#define IMAGE_FILE_NET_RUN_FROM_SWAP &nbsp; &nbsp; &nbsp; &nbsp; 0x0800&nbsp; \/\/ If Image is on Net, copy and run from the swap file.<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_FILE_SYSTEM &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x1000&nbsp; \/\/ System File.<br \/><\/SPAN><SPAN style=\"COLOR: #0000ff\">#define IMAGE_FILE_DLL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x2000&nbsp; \/\/ File is a DLL.<br \/><\/SPAN><\/STRONG>#define IMAGE_FILE_UP_SYSTEM_ONLY &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x4000&nbsp; \/\/ File should only be run on a UP machine<br \/>#define IMAGE_FILE_BYTES_REVERSED_HI &nbsp; &nbsp; &nbsp; &nbsp; 0x8000&nbsp; \/\/ Bytes of machine word are reversed. <\/LI><\/OL><br \/>\n<H3>IMAGE_OPTIONAL_HEADER<\/H3>\n<OL class=code>\n<LI>typedef struct _IMAGE_OPTIONAL_HEADER {<br \/>&nbsp; &nbsp; \/\/<br \/>&nbsp; &nbsp; \/\/ Standard fields.<br \/>&nbsp; &nbsp; \/\/ \n<LI>&nbsp; &nbsp; <SPAN style=\"COLOR: #0000ff\"><STRONG>WORD &nbsp;&nbsp; Magic;<br \/><\/STRONG><\/SPAN>&nbsp; &nbsp; BYTE &nbsp;&nbsp; MajorLinkerVersion;<br \/>&nbsp; &nbsp; BYTE &nbsp;&nbsp; MinorLinkerVersion;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SizeOfCode;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SizeOfInitializedData;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SizeOfUninitializedData;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #ff0000\">DWORD &nbsp; AddressOfEntryPoint;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; BaseOfCode;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; BaseOfData;<\/SPAN><\/STRONG> \n<LI>&nbsp; &nbsp; \/\/<br \/>&nbsp; &nbsp; \/\/ NT additional fields.<br \/>&nbsp; &nbsp; \/\/ \n<LI>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #ff0000\">DWORD &nbsp; ImageBase;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SectionAlignment;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; DWORD &nbsp; FileAlignment;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MajorOperatingSystemVersion;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MinorOperatingSystemVersion;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MajorImageVersion;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MinorImageVersion;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MajorSubsystemVersion;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; MinorSubsystemVersion;<br \/>&nbsp; &nbsp; DWORD &nbsp; Win32VersionValue;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SizeOfImage;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; DWORD &nbsp; SizeOfHeaders;<br \/>&nbsp; &nbsp; DWORD &nbsp; CheckSum;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; Subsystem;<br \/>&nbsp; &nbsp; <SPAN style=\"COLOR: #0000ff\"><SPAN style=\"COLOR: #000000\">WORD &nbsp;&nbsp; DllCharacteristics;<\/SPAN><br \/><\/SPAN>&nbsp; &nbsp; DWORD &nbsp; SizeOfStackReserve;<br \/>&nbsp; &nbsp; DWORD &nbsp; SizeOfStackCommit;<br \/>&nbsp; &nbsp; DWORD &nbsp; SizeOfHeapReserve;<br \/>&nbsp; &nbsp; DWORD &nbsp; SizeOfHeapCommit;<br \/>&nbsp; &nbsp; DWORD &nbsp; LoaderFlags;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; NumberOfRvaAndSizes;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];<br \/><\/SPAN><\/STRONG>} IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32; <\/LI><\/OL><br \/>\n<P>&nbsp;Optional Header\ub294 \uaf64\ub098 \uc911\uc694\ud55c \uc815\ubcf4\ub97c \uac00\uc9c0\uace0 \uc788\ub2e4. \uc704\uc5d0\uc11c \ubcf4\uba74 \uc54c \uc218 \uc788\ub4ef\uc774 PE \ud30c\uc77c\uc758 \uc804\ubc18\uc801\uc774 \ub0b4\uc6a9\ub4e4\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \ud3ec\ud568\ud55c\ub2e4. \ud56d\ubaa9\uc774 \uaf64\ub098 \ub9ce\uc740\ub370 \uc911\uc694\ud55c \uc815\ubcf4\ub9cc \ucd94\ub9ac\uba74 \uc544\ub798\uc640 \uac19\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>Magic<\/STRONG> : Signature\ub85c 32Bit\uc758 \uacbd\uc6b0 0x10b\ub97c \uac00\uc9d0 \n<LI><STRONG>SizeOfCode<\/STRONG>&nbsp;: \uc139\uc158 \uc911\uc5d0 IMAGE_SCN_CNT_CODE \uc18d\uc131\uc744 \uac00\uc9c4 \uc139\uc158\ub4e4 \uc804\uccb4\uc758 \ud569 \n<LI><STRONG>SizeOfInitializedData<\/STRONG> : \uc139\uc158 \uc911\uc5d0 IMAGE_SCN_CNT_INITIALIZED_DATA \uc18d\uc131\uc744 \uac00\uc9c4 \uc139\uc158\ub4e4 \uc804\uccb4\uc758 \ud569 \n<LI><STRONG>SizeOfUninitializedData<\/STRONG> : \uc139\uc158 \uc911\uc5d0 IMAGE_SCN_CNT_UNINITIALIZED_DATA \uc18d\uc131\uc744 \uac00\uc9c4 \uc139\uc158\ub4e4 \uc804\uccb4\uc758 \ud569 \n<LI><STRONG>AddressOfEntryPoint<\/STRONG> : Entry Point\uc758 \uc8fc\uc18c. \uc2e4\uc81c \ub85c\ub354\uac00 \uc81c\uc77c \uba3c\uc800 \uc2e4\ud589\ud560 \ucf54\ub4dc\uc758 \uc2dc\uc791\uc810 \n<LI><STRONG>BaseOfCode<\/STRONG> : \ucf54\ub4dc\uac00 \uc2dc\uc791\ub418\ub294 \uc0c1\ub300 \uc8fc\uc18c(RVA) \n<LI><STRONG>BaseOfData<\/STRONG>&nbsp;: \ub370\uc774\ud130\uac00 \uc2dc\uc791\ub418\ub294 \uc0c1\ub300 \uc8fc\uc18c(RVA) \n<LI><STRONG>ImageBase<\/STRONG> : \uc774\ubbf8\uc9c0\uac00 \ub85c\ub529\ub418\ub294 \uba54\ubaa8\ub9ac\uc758 Base \uc8fc\uc18c. \uc77c\ubc18\uc801\uc73c\ub85c \uc2e4\ud589\ud30c\uc77c\uc758 \uacbd\uc6b0 0x400000(4Mbyte) \uc704\uce58\uc5d0 \ub85c\ub529 \n<LI><STRONG>SectionAlignment<\/STRONG> : \uc139\uc158\uc774 \uc815\ub82c\ub418\ub294 \ud06c\uae30. PE \ud30c\uc77c \uc790\uccb4\uac00 \uba54\ubaa8\ub9ac \ub9f5 \ud30c\uc77c\uc774\uae30 \ub54c\ubb38\uc5d0 0x1000(4Kbyte) \ubcf4\ub2e4 \ud06c\uac70\ub098 \uac19\uc544\uc57c \ud568 \n<LI><STRONG>SizeOfImage<\/STRONG> : \ubaa8\ub4e0 \uc139\uc158\ub4e4\uc758 \ud569. \uc774\ubbf8\uc9c0<SPAN style=\"WIDTH: 226px; FLOAT: left; HEIGHT: 196px\" id=callbacknestssmhztistorycom424627>\n<OBJECT id=ssmhztistorycom424627 classid=clsid:d27cdb6e-ae6d-11cf-96b8-444553540000 width=\"100%\" height=\"100%\"><PARAM NAME=\"_cx\" VALUE=\"5979\"><PARAM NAME=\"_cy\" VALUE=\"5185\"><PARAM NAME=\"FlashVars\" VALUE=\"\"><PARAM NAME=\"Movie\" VALUE=\"http:\/\/cfs.tistory.com\/blog\/plugins\/CallBack\/callback.swf?destDocId=callbacknestssmhztistorycom424627&amp;id=42&amp;callbackId=ssmhztistorycom424627&amp;host=http:\/\/ssmhz.tistory.com&amp;float=left&amp;\"><PARAM NAME=\"Src\" VALUE=\"http:\/\/cfs.tistory.com\/blog\/plugins\/CallBack\/callback.swf?destDocId=callbacknestssmhztistorycom424627&amp;id=42&amp;callbackId=ssmhztistorycom424627&amp;host=http:\/\/ssmhz.tistory.com&amp;float=left&amp;\"><PARAM NAME=\"WMode\" VALUE=\"Transparent\"><PARAM NAME=\"Play\" VALUE=\"0\"><PARAM NAME=\"Loop\" VALUE=\"-1\"><PARAM NAME=\"Quality\" VALUE=\"High\"><PARAM NAME=\"SAlign\" VALUE=\"LT\"><PARAM NAME=\"Menu\" VALUE=\"0\"><PARAM NAME=\"Base\" VALUE=\"\"><PARAM NAME=\"AllowScriptAccess\" VALUE=\"never\"><PARAM NAME=\"Scale\" VALUE=\"NoScale\"><PARAM NAME=\"DeviceFont\" VALUE=\"0\"><PARAM NAME=\"EmbedMovie\" VALUE=\"0\"><PARAM NAME=\"BGColor\" VALUE=\"\"><PARAM NAME=\"SWRemote\" VALUE=\"\"><PARAM NAME=\"MovieData\" VALUE=\"\"><PARAM NAME=\"SeamlessTabbing\" VALUE=\"1\"><PARAM NAME=\"Profile\" VALUE=\"0\"><PARAM NAME=\"ProfileAddress\" VALUE=\"\"><PARAM NAME=\"ProfilePort\" VALUE=\"0\"><PARAM NAME=\"AllowNetworking\" VALUE=\"internal\"><PARAM NAME=\"AllowFullScreen\" VALUE=\"false\">\n    <\/OBJECT><\/SPAN>\uc2e4\ud589\uc744 \uc704\ud574 \uba54\ubaa8\ub9ac\ub97c \ud560\ub2f9\ud574\uc57c \ud558\ub294 \ucd1d \ud06c\uae30 \n<LI><STRONG>NumberOfRvaAndSizes<\/STRONG> : \ub4a4\uc5d0 \uc624\ub294 DataDirectory\uc758 \uac1c\uc218. \ubb34\uc870\uac74 16\uac1c \n<LI><STRONG>Data Directory<\/STRONG> : \ucd1d 16\uac1c\uac00 \uc788\uc73c\uba70 \uac01 \ud56d\ubaa9\uc740 \ud2b9\uc815 \ub370\uc774\ud130\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \uac00\uc9c0\uace0 \uc788\uc74c. \ub4a4\uc5d0\uc11c \uc124\uba85 <\/LI><\/UL><br \/>\n<P>&nbsp;Magic\uc740 \uc544\ub798\uc640 \uac19\uc774 WinNT.h\uc5d0 \uc815\uc758\ub418\uc5b4\uc788\ub2e4.<\/P>\n<OL class=code>\n<LI><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_NT_OPTIONAL_HDR32_MAGIC &nbsp; &nbsp;&nbsp; 0x10b<br \/><\/SPAN><\/STRONG>#define IMAGE_NT_OPTIONAL_HDR64_MAGIC &nbsp; &nbsp;&nbsp; 0x20b<br \/>#define IMAGE_ROM_OPTIONAL_HDR_MAGIC &nbsp; &nbsp; &nbsp; 0x107 <\/LI><\/OL><br \/>\n<H3>IMAGE_DATA_DIRECTORY<\/H3>\n<OL class=code>\n<LI>typedef struct _IMAGE_DATA_DIRECTORY {<br \/>&nbsp; &nbsp; DWORD &nbsp; VirtualAddress;<br \/>&nbsp; &nbsp; DWORD &nbsp; Size;<br \/>} IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY; <\/LI><\/OL><br \/>\n<P>&nbsp;\ub370\uc774\ud130 \ub514\ub809\ud1a0\ub9ac\ub294 \uc704\uc640 \uac19\uc740 \uad6c\uc870\ub85c \uc774\ub8e8\uc5b4\uc838\uc788\uc73c\uba70 IMAGE_OPTIONAL_HEADER\uc5d0 \ucd1d 16\uac1c\uac00 \uc788\ub2e4. \uac01\uac01\uc5d0 Index\uc5d0 \ub300\ud55c \ub9e4\ud06c\ub85c\ub294 WinNT.h\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \uc815\uc758\ub418\uc5b4\uc788\ub2e4.<\/P>\n<OL class=code>\n<LI><SPAN style=\"COLOR: #0000ff\"><STRONG>#define IMAGE_DIRECTORY_ENTRY_EXPORT &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0 &nbsp; \/\/ Export Directory<br \/><\/STRONG><\/SPAN><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DIRECTORY_ENTRY_IMPORT &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1 &nbsp; \/\/ Import Directory<br \/><\/SPAN><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DIRECTORY_ENTRY_RESOURCE &nbsp; &nbsp; &nbsp;&nbsp; 2 &nbsp; \/\/ Resource Directory<br \/><\/SPAN><\/STRONG>#define IMAGE_DIRECTORY_ENTRY_EXCEPTION &nbsp; &nbsp; &nbsp; 3 &nbsp; \/\/ Exception Directory<br \/>#define IMAGE_DIRECTORY_ENTRY_SECURITY &nbsp; &nbsp; &nbsp;&nbsp; 4 &nbsp; \/\/ Security Directory<br \/>#define IMAGE_DIRECTORY_ENTRY_BASERELOC &nbsp; &nbsp; &nbsp; 5 &nbsp; \/\/ Base Relocation Table<br \/>#define IMAGE_DIRECTORY_ENTRY_DEBUG &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 6 &nbsp; \/\/ Debug Directory<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_DIRECTORY_ENTRY_COPYRIGHT &nbsp; &nbsp; &nbsp; 7 &nbsp; \/\/ (X86 usage)<br \/>#define IMAGE_DIRECTORY_ENTRY_ARCHITECTURE &nbsp;&nbsp; 7 &nbsp; \/\/ Architecture Specific Data<br \/>#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR &nbsp; &nbsp; &nbsp; 8 &nbsp; \/\/ RVA of GP<br \/><SPAN><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DIRECTORY_ENTRY_TLS &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 9 &nbsp; \/\/ TLS Directory<\/SPAN><br \/><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG &nbsp;&nbsp; 10 &nbsp; \/\/ Load Configuration Directory<\/SPAN><br \/><\/STRONG><\/SPAN><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT &nbsp; 11 &nbsp; \/\/ Bound Import Directory in headers<br \/><\/SPAN><SPAN style=\"COLOR: #ff0000\">#define IMAGE_DIRECTORY_ENTRY_IAT &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 12 &nbsp; \/\/ Import Address Table<br \/><\/SPAN><\/STRONG>#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT &nbsp; 13 &nbsp; \/\/ Delay Load Import Descriptors<br \/>#define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 14 &nbsp; \/\/ COM Runtime descriptor <\/LI><\/OL><br \/>\n<P>&nbsp;\uc774\ubbf8\uc9c0 \ub514\ub809\ud1a0\ub9ac \uc815\ubcf4\ub294 \uad49\uc7a5\ud788 \uc911\uc694\ud558\ub2e4. \uacbd\uc6b0\uc5d0 \ub530\ub77c\uc11c \uc139\uc158\uc774 \ud569\uccd0\uc9c8 \uc218 \uc788\uae30 \ub54c\ubb38\uc5d0 \ud1b5\ud569\ub41c \uc139\uc158\uc5d0\uc11c \uc6d0\ud558\ub294 \uc815\ubcf4\ub97c \ucc3e\ub294 \ubc29\ubc95\uc740 \uc774\ubbf8\uc9c0 \ub514\ub809\ud1a0\ub9ac\uc5d0 \ud3ec\ud568\ub41c \uc815\ubcf4\ub97c \uc774\uc6a9\ud558\ub294 \ubc29\ubc95 \ubc16\uc5d0\ub294 \uc5c6\ub2e4. \uc5ec\ub7ec\ubaa8\ub85c \ub9ce\uc774 \uc4f0\uc774\ub294 \uc778\ub371\uc2a4\ub294 \uc544\ub798\uc640 \uac19\uc740 \uc5ed\ud560\uc744 \ud55c\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>IMAGE_DIRECTORY_ENTRY_EXPORT<\/STRONG> : Export \ud568\uc218\ub4e4\uc5d0 \ub300\ud55c Export Table\uc758 \uc2dc\uc791 \uc704\uce58\uc640 \ud06c\uae30\ub97c \ub098\ud0c0\ub0c4 \n<LI><STRONG>IMAGE_DIRECTORY_ENTRY_IMPORT<\/STRONG>&nbsp;: Import \ud568\uc218\ub4e4\uc5d0 \ub300\ud55c Import Table\uc758 \uc2dc\uc791 \uc704\uce58\uc640 \ud06c\uae30\ub97c \ub098\ud0c0\ub0c4 \n<LI><STRONG>IMAGE_DIRECTORY_ENTRY_RESOURCE<\/STRONG> : IMAGE_RESOURCE_DIRECTORY \uad6c\uc870\uccb4\uc758 \uc2dc\uc791 \uc704\uce58\ub97c \ub098\ud0c0\ub0c4 \n<LI><STRONG><SPAN style=\"COLOR: #ff0000\">IMAGE_DIRECTORY_ENTRY_TLS<\/SPAN><\/STRONG>&nbsp;: Thread Local Storage\uc5d0 \ub300\ud55c \ud3ec\uc778\ud130 \n<LI><STRONG><SPAN style=\"COLOR: #ff0000\">IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG<\/SPAN><\/STRONG>&nbsp;: IMAGE_LOAD_CONFIG_DIRECTORY \uad6c\uc870\uccb4\uc560 \ub300\ud55c \ud3ec\uc778\ud130 \n<LI><STRONG>IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT<\/STRONG> : IMAGE_BOUND_IMPORT_DESCRIPTOR \uad6c\uc870\uccb4\uc758 \ubc30\uc5f4\uc744 \uac00\ub9ac\ud0a4\ub294 \ud3ec\uc778\ud130 \n<LI><STRONG>IMAGE_DIRECTORY_ENTRY_IAT<\/STRONG> : Import Address Table\uc758 \uc2dc\uc791 \uc704\uce58\ub97c \ub098\ud0c0\ub0c4 <\/LI><\/UL>\n<P>&nbsp;\uc2e4\uc81c \uc704\uc758 \uac12\uc911\uc5d0\uc11c \ubcc0\uacbd\ud558\uba74 OS\uc758 \ub85c\ub354\uc5d0 \uc758\ud574 \ub85c\ub529\uc774 \ub418\uc9c0 \uc54a\ub294 \ubd80\ubd84\uc774 \uc788\ub294\ub370, \ubd89\uc740 \uc0c9\uc73c\ub85c \ud45c\uc2dc\ub41c <STRONG><SPAN style=\"COLOR: #ff0000\">IMAGE_DIRECTORY_ENTRY_TLS<\/SPAN><\/STRONG>\uc640 <STRONG><SPAN style=\"COLOR: #ff0000\">IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG<\/SPAN><\/STRONG> \ubd80\ubd84\uc774\ub2e4. \uc774 \ubd80\ubd84\uc740 \ubbf8\ub9ac \ub85c\ub354\uac00 \uc77d\uc5b4\uc11c \ucd08\uae30 \uc791\uc5c5\uc744 \uc2e4\ud589\ud558\ub294 \ubd80\ubd84\uc774\ub77c \uc774\ubd80\ubd84\uc774 \ud3ec\ud568\ub41c \uc601\uc5ed\uc744 \uc774\uc0c1\ud558\uac8c \uc870\uc791\ud558\uac8c\ub418\uba74 \ub85c\ub354\uac00 \ub85c\ub529\uc5d0 \uc2e4\ud328\ud558\uac8c \ub41c\ub2e4(PE\ud30c\uc77c \uc554\ud638\ud654 \uacfc\uc81c\ub97c \ud558\uba74\uc11c \uc628\ubab8\uc73c\ub85c \ub290\uaf08\ub2e4.. \u3161_\u3161;;;). \uc870\uc791\uc744 \ud558\ub824\uba74 \uc2e0\uc911\ud788 \ud574\uc57c\ub420 \ub4ef \uc2f6\ub2e4.<\/P><br \/>\n<P>&nbsp;\uc5ec\uae30\uae4c\uc9c0 IMAGE_NT_HEADER\uc5d0 \ub300\ud574\uc11c \uc54c\uc544\ubcf4\uc558\ub2e4. \uc77c\ub2e8 \uc9c0\uae08\uc740 \ud2b9\uc815\uc601\uc5ed\uc758 \ud06c\uae30\uc640 \uc704\uce58\ub97c \ud45c\uc2dc\ud55c\ub2e4\ub294 \uc815\ub3c4\ub9cc \uc54c\uc544\ub193\uace0 \ub2e4\uc74c\uc73c\ub85c \ub118\uc5b4\uac00\uc790.<\/P><br \/>\n<H2>IMAGE_SECTION_HEADER<\/H2>\n<P>&nbsp;PE \ud5e4\ub354\uc758 \ub4b7\ubd80\ubd84\uc5d0 \uc5f0\uc18d\ud574\uc11c IMAGE_SECTION_HEADER\uac00 \uc704\uce58\ud558\uac8c \ub41c\ub2e4. \uc139\uc158\uc740 \ub4a4\uc5d0 \uc62c \ucf54\ub4dc\ub098 \ub370\uc774\ud130\uac00 \uc704\uce58\ud558\ub294 \uc601\uc5ed\uc5d0 \ub300\ud55c \uad6c\uccb4\uc801\uc778 \uc815\ubcf4\ub97c \ud3ec\ud568\ud558\uace0 \uc788\uc73c\ubbc0\ub85c \uad49\uc7a5\ud788 \uc911\uc694\ud558\ub2e4. \uc139\uc158\uc758 \uac1c\uc218\ub294 \uc55e\uc11c IMAGE_FILE_HEADER\uc5d0 \ud3ec\ud568\ub41c <STRONG><SPAN style=\"COLOR: #0000ff\">NumberOfSections<\/SPAN><\/STRONG>\uc5d0\uc11c \uc5bb\uc744 \uc218 \uc788\uc73c\uba70 \ud574\ub2f9 \uac1c\uc218\ub9cc\ud07c \uc5bb\uc5b4\uc624\uba74 \ub41c\ub2e4. IMAGE_SECTION_HEADER\ub294 WinNT.h\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \uc815\uc758\ub418\uc5b4\uc788\ub2e4.<\/P>\n<OL class=code>\n<LI>#define IMAGE_SIZEOF_SHORT_NAME &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 8 \n<LI>typedef struct _IMAGE_SECTION_HEADER {<br \/>&nbsp; &nbsp; BYTE &nbsp;&nbsp; Name[IMAGE_SIZEOF_SHORT_NAME];<br \/>&nbsp; &nbsp; union {<br \/>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DWORD &nbsp; PhysicalAddress;<br \/>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; VirtualSize;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; } Misc;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; VirtualAddress;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; SizeOfRawData;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; PointerToRawData;<br \/><\/SPAN><\/STRONG>&nbsp; &nbsp; DWORD &nbsp; PointerToRelocations;<br \/>&nbsp; &nbsp; DWORD &nbsp; PointerToLinenumbers;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; NumberOfRelocations;<br \/>&nbsp; &nbsp; WORD &nbsp;&nbsp; NumberOfLinenumbers;<br \/>&nbsp; &nbsp; <STRONG><SPAN style=\"COLOR: #0000ff\">DWORD &nbsp; Characteristics;<br \/><\/SPAN><\/STRONG>} IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER; <\/LI><\/OL><br \/>\n<P>&nbsp; \uc911\uc694\ud55c \ud56d\ubaa9\uc5d0 \ub300\ud55c \uc758\ubbf8\ub294 \uc544\ub798\uc640 \uac19\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG><SPAN style=\"COLOR: #0000ff\">VirtualSize<\/SPAN><\/STRONG> : \uc2e4\uc81c \ucf54\ub4dc\ub098 \ub370\uc774\ud130 \uc601\uc5ed\uc758 \ud06c\uae30\ub97c \ud45c\uc2dc \n<LI><STRONG>VirtualAddress<\/STRONG> : \uba54\ubaa8\ub9ac\uc5d0 \ub85c\ub4dc\ub418\uc5c8\uc744 \ub54c RVA\ub97c \ud45c\uc2dc \n<LI><STRONG><SPAN style=\"COLOR: #0000ff\">SizeOfRawData<\/SPAN><\/STRONG> : VirtualSize\uc758 \ud06c\uae30\ub97c IMAGE_OPTIONAL_HEADER\uc5d0 \ud3ec\ud568\ub41c FileAlignment\uc758 \ub2e8\uc704\ub85c \uc62c\ub9bc\ud55c \ud06c\uae30 \n<LI><STRONG>PointerToRawData<\/STRONG> : \uc2e4\uc81c \uc139\uc158 \ub370\uc774\ud130\uac00 \ud30c\uc77c \ub0b4\uc5d0 \uc874\uc7ac\ud558\ub294 \uc624\ud504\uc14b. Virtual Address\uc640 \uac19\uc744 \uc218\ub3c4 \uc788\uace0 \ub2e4\ub97c \uc218\ub3c4 \uc788\uc74c \n<LI><STRONG>Characteristics<\/STRONG> : \uc139\uc158\uc758 \uc18d\uc131 \ud45c\uc2dc. \uc790\uc138\ud55c \uac83\uc740 \ub4a4\ub97c \ucc38\uc870 <\/LI><\/UL>\n<P>&nbsp;\uc704\uc758 VirtualSize\uc640 SizeOfRawData\ub294 \uc601\uc5ed\uc758 \ud06c\uae30\ub97c \ub098\ud0c0\ub0b8\ub2e4\ub294 \uacf5\ud1b5\uc810\uc774 \uc788\uc73c\ub098 \ub77c\uc6b4\ub4dc \uc5c5\ub41c \ud06c\uae30\uc640 \uc2e4\uc81c \ud06c\uae30\ub97c \ub098\ud0c0\ub0b8\ub2e4\ub294 \ucc28\uc774\uac00 \uc788\ub2e4. \ub9cc\uc57d \uc139\uc158\uc758 \ud06c\uae30\ub97c \uc870\uc791\ud588\ub2e4\uba74 \uc704\uc758 \ub450\ubd80\ubd84 \ubaa8\ub450 \uc190\uc744 \ubd10\uc57c \ud55c\ub2e4.<\/P>\n<P>&nbsp;Virtual Address\uc640 Pointer To Raw Data\uc758 \uac12\uc774 \ub2e4\ub97c \uc218 \uc788\ub2e4\uace0 \ud588\ub294\ub370, \uc65c\uadf8\ub7f4\uae4c? \uc774\uac83\uc740 \uc2e4\ud589 \ud30c\uc77c\uc758 \ud06c\uae30\ub97c \uc904\uc774\uae30 \uc704\ud574\uc11c\uc774\ub2e4. \ub9cc\uc57d \ub85c\ub4dc \ub418\uc5c8\uc744 \ub54c \ud06c\uae30\uac00 0x2000 \uc815\ub3c4\uc778 \uc139\uc158\uc774 \uc788\ub2e4\uace0 \ud558\uc790. \uadf8\ub7f0\ub370 \uc774 \uc139\uc158\uc740 \uba54\ubaa8\ub9ac\uc758 \uac12\uc774 \ucd08\uae30\ud654 \ub420 \ud544\uc694\ub3c4 \uc5c6\uace0 \uac12\ub3c4 \ub4e4\uc5b4\uc788\uc9c0 \uc54a\ub2e4\uba74? \uc2e4\ud589 \uc2dc\uc5d0 \uc601\uc5ed\ub9cc \ud560\ub2f9\ud574\uc8fc\uba74 \ub05d\uc774\ub77c\uba74? \uc774\ub7f0 \uacbd\uc6b0\ub77c\uba74 \uad73\uc774 \uc774 \uc139\uc158\uc774 \uc2e4\ud589\ud30c\uc77c\uc5d0\uc11c \uc601\uc5ed\uc744 \uac00\uc9c0\uace0 \uc788\uc744 \ud544\uc694\uac00 \uc5c6\ub2e4. \ub530\ub77c\uc11c Virtual Address\ub294 0\uc774 \uc544\ub2cc \uac12\uc744 \uac16\uaca0\uc9c0\ub9cc \ud30c\uc77c \ub0b4\uc5d0 \uc704\uce58\ub97c \uc758\ubbf8\ud558\ub294 Pointer To Raw Data\uc758 \uac12\uc740 0\uc774 \ub41c\ub2e4.<\/P>\n<P>&nbsp;\uc989 \uc2e4\uc81c \ud30c\uc77c \ub0b4\uc5d0\ub294 \uc874\uc7ac\ud558\uc9c0 \uc54a\ub294 \uc601\uc5ed\uc774 \uc0dd\uae40\uc73c\ub85c\uc368 Virtual Address\uc640 Pointer To Raw Data\uc758 \uac12\uc774 \ub2ec\ub77c\uc9c8 \uc218 \uc788\uc73c\uba70, \uae30\ud0c0 \ub2e4\ub978 \uc774\uc720\ub85c\ub3c4 \ucda9\ubd84\ud788 \ub2e4\ub97c \uc218 \uc788\ub2e4. <STRONG><SPAN style=\"COLOR: #0000ff\">\ub530\ub77c\uc11c \uc2e4\ud589\ud30c\uc77c\uc744 \uc870\uc791\ud558\uae30\uc704\ud574\uc11c\ub294 Pointer To Raw Data\uc758 \uac12\uc744 \uc704\uc8fc\ub85c \uc791\uc5c5\uc744 \ud574\uc57c \ud55c\ub2e4.<\/SPAN><\/STRONG><\/P><br \/>\n<P>&nbsp;Characteristics\ub294 \ud574\ub2f9 \uc601\uc5ed\uc758 \uc18d\uc131\uc744 \ub098\ud0c0\ub0b4\ub294\ub370, WinNT.h\uc5d0 \uc815\uc758\ub418\uc5b4\uc788\uace0 \uc544\uc8fc \ud765\ubbf8\ub85c\uc6b4 \uac12\uc744 \uac00\uc9c0\uace0 \uc788\ub2e4.<\/P>\n<OL class=code>\n<LI>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_REG &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000000&nbsp; \/\/ Reserved.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_DSECT &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000001&nbsp; \/\/ Reserved.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_NOLOAD &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00000002&nbsp; \/\/ Reserved.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_GROUP &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000004&nbsp; \/\/ Reserved.<br \/>#define IMAGE_SCN_TYPE_NO_PAD &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00000008&nbsp; \/\/ Reserved.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_COPY &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00000010&nbsp; \/\/ Reserved. \n<LI><STRONG><SPAN style=\"COLOR: #0000ff\"><SPAN style=\"COLOR: #ff0000\">#define IMAGE_SCN_CNT_CODE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000020&nbsp; \/\/ Section contains code.<br \/><\/SPAN><\/SPAN><SPAN style=\"COLOR: #0000ff\"><SPAN style=\"COLOR: #ff0000\">#define IMAGE_SCN_CNT_INITIALIZED_DATA &nbsp; &nbsp; &nbsp; 0x00000040&nbsp; \/\/ Section contains initialized data.<br \/>#define IMAGE_SCN_CNT_UNINITIALIZED_DATA &nbsp; &nbsp; 0x00000080&nbsp; \/\/ Section contains uninitialized data.<\/SPAN><\/SPAN><\/STRONG> \n<LI>#define IMAGE_SCN_LNK_OTHER &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00000100&nbsp; \/\/ Reserved.<br \/>#define IMAGE_SCN_LNK_INFO &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000200&nbsp; \/\/ Section contains comments or some other type of information.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_TYPE_OVER &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00000400&nbsp; \/\/ Reserved.<br \/>#define IMAGE_SCN_LNK_REMOVE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00000800&nbsp; \/\/ Section contents will not become part of image.<br \/>#define IMAGE_SCN_LNK_COMDAT &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00001000&nbsp; \/\/ Section contents comdat.<br \/>\/\/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00002000&nbsp; \/\/ Reserved.<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_MEM_PROTECTED - Obsolete &nbsp; 0x00004000<br \/>#define IMAGE_SCN_NO_DEFER_SPEC_EXC &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00004000&nbsp; \/\/ Reset speculative exceptions handling bits in the TLB entries for this section.<br \/>#define IMAGE_SCN_GPREL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00008000&nbsp; \/\/ Section content can be accessed relative to GP<br \/>#define IMAGE_SCN_MEM_FARDATA &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00008000<br \/>\/\/ &nbsp; &nbsp;&nbsp; IMAGE_SCN_MEM_SYSHEAP&nbsp; - Obsolete &nbsp;&nbsp; 0x00010000<br \/>#define IMAGE_SCN_MEM_PURGEABLE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00020000<br \/>#define IMAGE_SCN_MEM_16BIT &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00020000<br \/>#define IMAGE_SCN_MEM_LOCKED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00040000<br \/>#define IMAGE_SCN_MEM_PRELOAD &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00080000 \n<LI>#define IMAGE_SCN_ALIGN_1BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00100000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_2BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00200000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_4BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00300000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_8BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00400000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_16BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00500000&nbsp; \/\/ Default alignment if no others are specified.<br \/>#define IMAGE_SCN_ALIGN_32BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00600000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_64BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00700000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_128BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00800000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_256BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00900000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_512BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00A00000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_1024BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00B00000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_2048BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00C00000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_4096BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00D00000&nbsp; \/\/<br \/>#define IMAGE_SCN_ALIGN_8192BYTES &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00E00000&nbsp; \/\/<br \/>\/\/ Unused &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x00F00000<br \/>#define IMAGE_SCN_ALIGN_MASK &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x00F00000 \n<LI>#define IMAGE_SCN_LNK_NRELOC_OVFL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x01000000&nbsp; \/\/ Section contains extended relocations.<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_SCN_MEM_DISCARDABLE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x02000000&nbsp; \/\/ Section can be discarded.<br \/><\/SPAN><\/STRONG>#define IMAGE_SCN_MEM_NOT_CACHED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x04000000&nbsp; \/\/ Section is not cachable.<br \/>#define IMAGE_SCN_MEM_NOT_PAGED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x08000000&nbsp; \/\/ Section is not pageable.<br \/><STRONG><SPAN style=\"COLOR: #0000ff\">#define IMAGE_SCN_MEM_SHARED &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x10000000&nbsp; \/\/ Section is shareable.<br \/><\/SPAN><\/STRONG><SPAN style=\"COLOR: #ff0000\"><STRONG>#define IMAGE_SCN_MEM_EXECUTE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x20000000&nbsp; \/\/ Section is executable.<br \/>#define IMAGE_SCN_MEM_READ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0x40000000&nbsp; \/\/ Section is readable.<br \/>#define IMAGE_SCN_MEM_WRITE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0x80000000&nbsp; \/\/ Section is writeable.<\/STRONG><\/SPAN> <\/LI><\/OL><br \/>\n<P>&nbsp; \uc911\uc694\ud55c \ud50c\ub798\uadf8 \ubcc4\ub85c \uc758\ubbf8\ub97c \ubcf4\uba74 \uc544\ub798\uc640 \uac19\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><STRONG>IMAGE_SCN_CNT_CODE<\/STRONG> : \uc139\uc158\uc5d0 \ucf54\ub4dc\uac00 \ud3ec\ud568\ub418\uc5b4\uc788\uc74c. IMAGE_SCN_MEM_EXECUTE\uc640 \ubcf4\ud1b5 \uac19\uc774 \uc9c0\uc815\ub428 \n<LI><STRONG>IMAGE_SCN_CNT_INITIALIZED_DATA<\/STRONG> : \uc139\uc158\uc774 \ucd08\uae30\ud654\ub41c \ub370\uc774\ud130\ub97c \ud3ec\ud568\ud558\uace0 \uc788\uc74c \n<LI><STRONG>IMAGE_SCN_CNT_UNINITIALIZED_DATA<\/STRONG> : \uc139\uc158\uc774 \ucd08\uae30\ud654 \ub418\uc9c0 \uc54a\uc740 \ub370\uc774\ud130\ub97c \ud3ec\ud568\ud558\uace0 \uc788\uc74c \n<LI><STRONG>IMAGE_SCN_MEM_DISCARDABLE<\/STRONG> : \uc139\uc158\uc774 \ubc84\ub824\uc9c8 \uc218 \uc788\uc74c. \ud55c\ubc88 \uc0ac\uc6a9\ub418\uace0 \ud544\uc694\uc5c6\ub294 \uc139\uc158\ub4e4(relocation \ub370\uc774\ud130 \uac19\uc740 \uacbd\uc6b0)\uc774 \uc774 \uc18d\uc131\uc744 \uac00\uc9d0 \n<LI><STRONG>IMAGE_SCN_MEM_SHARED<\/STRONG> : \uc139\uc158\uc774 \uc774 \ubaa8\ub4c8\uc744 \uc0ac\uc6a9\ud558\ub294 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\uc5d0 \uc758\ud574\uc11c \uacf5\uc720\ub420 \uc218 \uc788\uc74c\uc744 \uc758\ubbf8 \n<LI><STRONG>IMAGE_SCN_MEM_EXECUTE<\/STRONG> : \uc139\uc158\uc774 \uc2e4\ud589 \uac00\ub2a5\ud568 \n<LI><STRONG>IMAGE_SCN_MEM_READ<\/STRONG> : \uc139\uc158\uc774 \uc77d\uae30 \uac00\ub2a5\ud568 \n<LI><STRONG>IMAGE_SCN_MEM_WRITE<\/STRONG> : \uc139\uc158\uc774 \uc4f0\uae30 \uac00\ub2a5\ud568 <\/LI><\/UL>\n<P>&nbsp;\uc704\uc758 \uac12\uc744 \ubcf4\uba74 \uc139\uc158\uc5d0 \ub300\ud55c \uc18d\uc131\uc774 \ubbf8\ub9ac \uc815\uc758\ub418\uc5b4\uc788\ub2e4\ub294 \uac83\uc744 \uc54c \uc218 \uc788\ub2e4. \uc989 \ub370\uc774\ud130 \uc139\uc158 \uac19\uc740 \uacbd\uc6b0 IMAGE_SCN_MEM_READ\/WRITE \uc18d\uc131\uc744 \uac00\uc9c0\uace0 \uc788\uc73c\ub9ac\ub77c \uc720\ucd94\ud560 \uc218 \uc788\uace0, \ucf54\ub4dc\uac00 \ud3ec\ud568\ub41c \uc139\uc158\uc758 \uacbd\uc6b0 IMAGE_SCN_MEM_EXECUTE \uc18d\uc131\uc744 \uac00\uc9c0\uace0 \uc788\ub2e4\uace0 \uc720\ucd94\ud560 \uc218 \uc788\ub2e4.<\/P>\n<P>&nbsp;\uc139\uc158\uc758 \uacbd\uc6b0 \uc139\uc158 \uc774\ub984\uc744 \uac00\uc9c0\uace0 \uc788\ub294\ub370, VC\ub85c \uc2e4\ud589\ud30c\uc77c\uc744 \ub9cc\ub4e4\uba74 .text, .data, .idata\uc640 \uac19\uc740 \uc774\ub984\uc758 \uc139\uc158\ub4e4\uc774 \uc0dd\uae34\ub2e4. \uc774\ub984 \uadf8\ub300\ub85c \ucf54\ub4dc, \ub370\uc774\ud130\uc640 \uac19\uc740 \uc815\ubcf4\uac00 \ud3ec\ud568\ub41c \uc139\uc158\uc774\ub77c\ub294 \uac83\uc744 \uc54c \uc218 \uc788\ub294\ub370, \uc5ec\uae30\uc11c \uc18d\uc9c0 \ub9d0\uc544\uc57c \ud560 \uac83\uc740 <STRONG>\uc139\uc158 \uc774\ub984\uc740 \uad8c\uc7a5\uac12\uc774\ubbc0\ub85c \uc139\uc158 \uc774\ub984\uc73c\ub85c \uc139\uc158\uc774 \ud3ec\ud568\ud558\ub294 \ub0b4\uc6a9\uc744 \ud310\ub2e8\ud558\uba74 \uc548\ub41c\ub2e4\ub294 \uac83\uc774\ub2e4<\/STRONG>. \ud2b9\ud788 \ud30c\uc77c\uc758 \ud06c\uae30\ub97c \uc904\uc774\ub294 \ub9b4\ub9ac\uc988 \uc635\uc158 \uac19\uc740 \uacbd\uc6b0\ub294 \uc139\uc158\ub4e4\uc774 \ud569\uccd0\uc838\uc11c \ud558\ub098\uc758 \uc139\uc158\uc73c\ub85c \uc874\uc7ac\ud558\ub294 \uacbd\uc6b0\ub3c4 \uc788\uae30 \ub54c\ubb38\uc5d0 \uc139\uc158 \uc774\ub984\uc744 \uc774\uc6a9\ud574\uc11c \ucc3e\uc544\uc11c\ub294 \uc548\ub418\uba70 <STRONG><SPAN style=\"COLOR: #0000ff\">IMAGE_NT_HEADER<\/SPAN><\/STRONG>\uc5d0 \uc788\ub294 <STRONG><SPAN style=\"COLOR: #0000ff\">Data Directory<\/SPAN><\/STRONG>\uc758 \uac12\uc744 \ucc38\uc870\ud574\uc11c \ucc3e\ub3c4\ub85d \ud574\uc57c \ud55c\ub2e4.<\/P><br \/>\n<H2>\uc2e4\uc81c \uad6c\ud604<\/H2>\n<P>&nbsp;\uc124\uba85\uc774 \uad49\uc7a5\ud788 \uae38\uc5c8\ub2e4. \uc774\uc81c \uc2e4\uc81c\ub85c \uc774 \ud5e4\ub354 \uc815\ubcf4\ub97c \ubd84\uc11d\ud558\ub294 \uac04\ub2e8\ud55c \ucf54\ub4dc\ub97c \uc791\uc131\ud574 \ubcf4\uc790. RVA\uc640 PointerOfRawData\uc758 \uad00\uacc4\ub97c \uc0dd\uac01\ud558\uba74 \uc57d\uac04 \ubcf5\uc7a1\ud55c\ub370, \uc774\uac83\uc740 \ucd94\ud6c4\uc5d0 \ub2e4\uc2dc \ubcf4\ub3c4\ub85d \ud558\uace0 \ud5e4\ub354 \uc815\ubcf4\ub9cc \ud45c\uc2dc\ud574 \ubcf4\uc790.<\/P>\n<P>&nbsp;\ubd84\uc11d\ud558\ub294 \ud074\ub798\uc2a4\ub97c \uc791\uc131\ud558\uc5ec \uac04\ub2e8\ud788 \ud5e4\ub354 \uc815\ubcf4\ub97c \ucd94\ucd9c\ud558\uace0 \uc774\ub97c \ud654\uba74\uc5d0 \ud45c\uc2dc\ud558\ub294 \ud14c\uc2a4\ud2b8 \ud504\ub85c\uadf8\ub7a8\uc744 \uc791\uc131\ud558\uc600\ub2e4.<\/P>\n<UL style=\"MARGIN-LEFT: 1em\">\n<LI><a class=\"con_link\" title=\"PEAnalyzer.h\" href=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/168997\" target=\"_blank\" rel=\"noopener\"><STRONG><FONT color=#568942>PEAnalyzer.h<\/FONT><\/STRONG><\/A><STRONG>&nbsp;: PE \ud30c\uc77c\uc744 \ubd84\uc11d\ud558\ub294 \ud074\ub798\uc2a4\uc758 \ud5e4\ub354 \ud30c\uc77c<\/STRONG> \n<LI><a class=\"con_link\" title=\"PEAnalyzer.cpp\" href=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/168998\" target=\"_blank\" rel=\"noopener\"><STRONG><FONT color=#568942>PEAnalyzer.cpp<\/FONT><\/STRONG><\/A><STRONG>&nbsp;: PE \ud30c\uc77c\uc744 \ubd84\uc11d\ud558\ub294 \ud074\ub798\uc2a4\uc758 \uc18c\uc2a4 \ud30c\uc77c<\/STRONG> \n<LI><a class=\"con_link\" title=\"main.cpp\" href=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/169001\" target=\"_blank\" rel=\"noopener\"><STRONG><FONT color=#568942>main.cpp<\/FONT><\/STRONG><\/A><STRONG>&nbsp;: \uc2e4\uc81c \uc0ac\uc6a9\ud558\ub294 \uc608\uc81c<\/STRONG> <\/LI><\/UL><br \/>\n<P>&nbsp;\uc544\ub798\ub294 \uc2e4\ud589 \uacb0\uacfc\uc774\ub2e4.<\/P>\n<P style=\"TEXT-ALIGN: center\"><IMG style=\"CURSOR: pointer\" id=userImg3900270 onclick=\"popview(this, '90000003_000000000000000DFC1EB00A')\" src=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/169002\" onload='setTimeout(\"resizeImage(3900270)\",200)'><\/P>\n<P style=\"TEXT-ALIGN: center\"><STRONG>&lt;IMAGE_DOS_HEADER\uc758 \uac12&gt;<\/STRONG><\/P>\n<P style=\"TEXT-ALIGN: center\"><IMG style=\"CURSOR: pointer\" id=userImg1675597 onclick=\"popview(this, '90000003_000000000000000DFC1EB00A')\" src=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/169003\" onload='setTimeout(\"resizeImage(1675597)\",200)'><\/P>\n<P style=\"TEXT-ALIGN: center\"><STRONG>&lt;IMAGE_SECTION_HEADER\uc758 \uac12&gt;<\/STRONG><\/P><br \/>\n<H1>\ub9c8\uce58\uba74\uc11c...<\/H1>\n<P>&nbsp;\uc9c0\uae08\uae4c\uc9c0 PE \ud30c\uc77c\uc758 \ud5e4\ub354 \uc815\ubcf4\uc5d0 \ub300\ud574\uc11c \uc54c\uc544\ubcf4\uc558\ub2e4. \ub2e4\uc74c\uc5d0\ub294 \uc2e4\ud589\uc5d0 \ud544\uc694\ud55c \ud568\uc218\ub4e4\uacfc \uc678\ubd80\ub85c \ub178\ucd9c\ub41c \ud568\uc218\ub4e4\uc744 \ucc3e\ub294 \uac83\uc5d0 \ub300\ud574\uc11c \uc54c\uc544\ubcf4\uc790.<\/P><br \/>\n<H2>2007\/10\/09 01:00:16 \ucd94\uac00 <\/H2>\n<P>&nbsp;\uc544\ub798\ub294 Win CE\uc6a9 \uc2e4\ud589\ud30c\uc77c \ud5e4\ub354\ub97c \ubd84\uc11d\ud55c \ubd80\ubd84\uc774\ub2e4. IMAGE_FILE_HEADER\uc758 Machine \ud544\ub4dc \ubd80\ubd84\uc774 \ub2e4\ub978 \uac83\uc744 \uc54c \uc218 \uc788\ub2e4. <\/P>\n<P style=\"TEXT-ALIGN: center\"><IMG style=\"CURSOR: pointer\" id=userImg5507076 onclick=\"popview(this, '90000003_000000000000000DFC1EB00A')\" src=\"http:\/\/kkamagui.springnote.com\/pages\/401262\/attachments\/229742\" onload='setTimeout(\"resizeImage(5507076)\",200)'>&nbsp;<\/P>\n<P><br \/><STRONG>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; \ucd9c\ucc98(<\/STRONG><a class=\"con_link\" href=\"http:\/\/kkamagui.tistory.com\/\" target=\"_blank\" _cssquery_UID=\"73\" rel=\"noopener\"><SPAN style=\"COLOR: #800080\"><STRONG>http:\/\/kkamagui.tistory.com<\/STRONG><\/SPAN><\/A><STRONG>, <\/STRONG><a class=\"con_link\" href=\"http:\/\/kkamagui.springnote.com\/pages\/404250#\" target=\"_blank\" rel=\"noopener\"><SPAN style=\"COLOR: #800080\"><STRONG>http:\/\/kkamagui.springnote.com<\/STRONG><\/SPAN><\/A><STRONG>) \n<\/STRONG>\n","protected":false},"excerpt":{"rendered":"<p>\uac1c\uc694 &nbsp;\uc708\ub3c4\uc6b0 \uc2dc\uc2a4\ud15c \ud504\ub85c\uadf8\ub798\ubc0d\ud55c\ub2e4\ub294 \uc0ac\ub78c\uce58\uace0 PE \ud30c\uc77c\uc5d0 \ub300\ud574\uc11c \ubaa8\ub974\ub294 \uc0ac\ub78c\uc740 \uc544\ub9c8 \uac70\uc758 \uc5c6\uc744 \uac83\uc774\ub2e4. \uc708\ub3c4\uc6b0 \uc2e4\ud589 \ud30c\uc77c \ubc0f DLL, \uadf8\ub9ac\uace0 \ub4dc\ub77c\uc774\ubc84 \ud30c\uc77c\uae4c\uc9c0\ub3c4 PE \ud30c\uc77c \ud615\ud0dc\ub97c \ub530\ub974\uace0 \uc788\uc73c\ub2c8 \ubb58 \ud574\ub3c4 \ub530\ub77c\ub2e4\ub2c8\ub294\uac8c \uc774 PE(Portable Executable) \ud30c\uc77c \ud3ec\ub9f7\uc774\ub2c8\uae4c \ub9d0\uc774\ub2e4. PE \ud30c\uc77c \ud3ec\ub9f7\uc740 \ud06c\uac8c \ud5e4\ub354, \uc139\uc158, \ub370\uc774\ud130\uc758 \uc138\ubd80\ubd84\uc73c\ub85c \ub098\ub258\ub294\ub370 \uae30\uc874 DOS \uc2dc\uc808 \uc0ac\uc6a9\ud558\ub358 COFF(Common Object File Format)\uacfc \uac70\uc758 \ube44\uc2b7\ud55c [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[18],"tags":[],"class_list":["post-141","post","type-post","status-publish","format-standard","hentry","category-development_language"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=141"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/141\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}