-
-
关于PE文件中IMAGE_SECTION_HEADER结构的疑惑,望高人指路
-
发表于:
2006-11-20 20:06
5272
-
关于PE文件中IMAGE_SECTION_HEADER结构的疑惑,望高人指路
typedef struct _IMAGE_SECTION_HEADER {
BYTE Name[IMAGE_SIZEOF_SHORT_NAME];
union {
DWORD PhysicalAddress;
DWORD VirtualSize;
} Misc;
DWORD VirtualAddress;
DWORD SizeOfRawData;
DWORD PointerToRawData;
DWORD PointerToRelocations;
DWORD PointerToLinenumbers;
WORD NumberOfRelocations;
WORD NumberOfLinenumbers;
DWORD Characteristics;
} IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
对于
union {
DWORD PhysicalAddress;
DWORD VirtualSize;
} Misc;
中的VirtualSize和
结构体中的SizeOfRawData;我不太清楚它俩的意义,
virtualsize和SizeOfRawData;哪个大些哪个小些,
virtualsize是指区块加载到内存对齐后的大小?还是??
SizeOfRawData是指区块在磁盘上对齐后的大小?还是??
我晕晕的了
[课程]Linux pwn 探索篇!