请教高手了,数据节的SizeOfRawData总不按照套路出牌,废话不说,例子:
SectionAlignment: 0x00001000
FileAlignment: 0x00001000
Section 3:
Section Name: .rdata
Misc.PhysicalAddress: 0x0010329a
Misc.VirtualSize: 0x0010329a
Virtual Address: 0x00336000
SizeOfRawData: 0x00104000
PointerToRawData: 0x00336000
PointerToRelocations: 0x00000000
PointerToLinenumbers: 0x00000000
NumberOfRelocations: 0x00000000
NumberOfLinenumbers: 0x00000000
Characteristics: 0x40000040
Section 4:
Section Name: .data
Misc.PhysicalAddress: 0x000ad7e4
Misc.VirtualSize: 0x000ad7e4
Virtual Address: 0x0043a000
SizeOfRawData: 0x00037000
PointerToRawData: 0x0043a000
PointerToRelocations: 0x00000000
PointerToLinenumbers: 0x00000000
NumberOfRelocations: 0x00000000
NumberOfLinenumbers: 0x00000000
Characteristics: 0xc0000040
SizeOfRawData在这里应该是0x000ae000才对啊,这个0x00037000是怎么回事?下面的都完全正确,为什么就数据节不按照套路出牌?谢谢各位高手
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课