#1
|
|||
|
|||
seek info on rdata layout
Is it usual for the Import Address Table and the Import Table to be separated by close to 200k bytes? I'm looking at VC++6 code where the IAT is at start of rdata section and the importtable at the end.
|
#2
|
|||
|
|||
I guess it is normal. I checked several VC++ executables I had and the biggest difference I found was 900 KB. The IAT was always at the start of .rdata section and the IMAGE_DIRECTORY_ENTRY_IMPORT pointed always to the end of the .rdata section. I don't see where the problem should be. It even works if both are in different sections.
|
#3
|
|||
|
|||
I'm not sure.Perhaps this happens because of "SectionAlignment" of PE file.
Because all sections should align to it,and this can make unused space between these sections.This will discuss why this unused space is deffer between deferent files. sincerely yours |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
looking for adware info and homepage hijacker info | chad1111 | General Discussion | 7 | 01-10-2005 21:02 |
Need some info. | hobgoblin | General Discussion | 3 | 06-29-2004 05:14 |
Visual Studio.NET 2003_CD(1-4) Layout | ferrari | General Discussion | 4 | 03-26-2004 02:55 |