PE File
ymzhou117
这个作者很懒,什么都没留下…
展开
-
windows PE Image 文件分析(5)--- .rsrc 节与 resource table
转自:http://www.sgoldcn.com/simple/?t1876.html PE 文件所有使用的 resource table 非常复杂,一个典型的 windows GUI 应用程序普遍都使用到了 7 个左右的资源。 1. windows 中的资源 在 WinUser.h 文件里定义了 windows 中所使用的全部资源: /* * Pr转载 2012-03-26 15:40:42 · 3769 阅读 · 1 评论 -
Peering Inside the PE: A Tour of the Win32 Portable Executable File Format - Part 1
The format of an operating system's executable file is in many ways a mirror of the operating system. Although studying an executable file format isn't usually high on most programmers' list of things转载 2012-03-12 21:55:09 · 1175 阅读 · 0 评论 -
Peering Inside the PE: A Tour of the Win32 Portable Executable File Format - Part 2
The Section Table Betweenthe PE header and the raw data for the image's sections lies the section table.The section table is essentially a phone book containing information about eachsection in the i转载 2012-03-12 22:50:11 · 1355 阅读 · 0 评论