Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-21-2005, 09:57
raygun
 
Posts: n/a
seek info on rdata layout

Is it usual for the Import Address Table and the Import Table to be separated by close to 200k bytes? I'm looking at VC++6 code where the IAT is at start of rdata section and the importtable at the end.
Reply With Quote
  #2  
Old 01-21-2005, 19:30
Kerlingen
 
Posts: n/a
I guess it is normal. I checked several VC++ executables I had and the biggest difference I found was 900 KB. The IAT was always at the start of .rdata section and the IMAGE_DIRECTORY_ENTRY_IMPORT pointed always to the end of the .rdata section. I don't see where the problem should be. It even works if both are in different sections.
Reply With Quote
  #3  
Old 01-21-2005, 20:21
Hero Hero is offline
VIP
 
Join Date: Jan 2005
Posts: 224
Rept. Given: 2
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 4
Thanks Rcvd at 2 Times in 2 Posts
Hero Reputation: 1
I'm not sure.Perhaps this happens because of "SectionAlignment" of PE file.
Because all sections should align to it,and this can make unused space between
these sections.This will discuss why this unused space is deffer between deferent
files.

sincerely yours
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
looking for adware info and homepage hijacker info chad1111 General Discussion 7 01-10-2005 21:02
Need some info. hobgoblin General Discussion 3 06-29-2004 05:14
Visual Studio.NET 2003_CD(1-4) Layout ferrari General Discussion 4 03-26-2004 02:55


All times are GMT +8. The time now is 15:42.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )