1 When the PE file is executed, the PE loader first checks the PE Header offset in the DOS MZ HEADER. If you find it, you ignore the DOS STUB section directly to PE Header.
2 The PE loader checks if PE Header is valid, and validly jumps to the tail of PE Header. 3 The PE loader reads the information in the section table, and then maps these sections to the memory using the method of memory file mapping, and then sets the properties of the memory block according to the properties of the section table. 4 The PE file is mapped to the memory, the PE loader will process the logical part of the IMPORT TABLE in the PE file.
