System/Windows
PE struct
TaeSun1114
2012. 8. 30. 10:45
typedef struct _IMAGE_SECTION_HEADER{
BYTE Name[IAMGE_SIZEOF_SHORT_NAME];
union{
DWORD PhysicalAddress;
DWORD VirtualSize;
}Misc;
DWORD VirtualAddress;
DWORD SizeOfRawData;
DWORD PointerToRawData;
DWORD PointerToRelocations;
DWORD PointerToLinenumbers;
WORD NumberOfRelocations;
WORd NumberOfLinenumbers;
DWORD Characteristices;
}IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
RAW = RAV - VirtualAddress + PointerToRawData