System/Windows

PE struct

TaeSun1114 2012. 8. 30. 10:45






typedef struct _IMAGE_SECTION_HEADER{ 

BYTE Name[IAMGE_SIZEOF_SHORT_NAME];

union{

DWORD    PhysicalAddress;

DWORD    VirtualSize;

}Misc;

DWORD    VirtualAddress;

DWORD    SizeOfRawData;

DWORD    PointerToRawData;

DWORD    PointerToRelocations;

DWORD    PointerToLinenumbers;

WORD     NumberOfRelocations;

WORd     NumberOfLinenumbers;

DWORD    Characteristices;

}IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;



RAW = RAV - VirtualAddress + PointerToRawData