An exe page should use what tools to view the catalogue, how to check

CodePudding user response:

Exe page directory list, what do you mean, exe file header table, table, table, export table, the table of all kinds of resources, such as these can use dumppe or exescope view,

CodePudding user response:

In high 2 g space, is quite laborious

CodePudding user response:

Haven't heard page table,,,

CodePudding user response:

Use lordPE tool view, you can know the structure of PE and structure, by winhex open their own view

CodePudding user response:

You should say is data table of contents, exe file is divided into DOS head (0 to 3 f), DOS stub area (40, size not sure), PE file header (E0 began to 1 d8) generally include PE header (4 bytes), PE file header (20 bytes), PE optional header (224 bytes), in which the data catalogue is optional head last parameter, data a total of 16 catalogue, each for 8 bytes (one is the relative virtual address, 4 bytes, one is the size, 4 bytes), namely the general 1 d8h - 80 - h + 1) is the starting address of the data table of contents. If the DOS stub area is big, PE behind starting to move at the same time, the indicators of PE is PE start (50450000), you can use the binary editor open exe file, according to the above down to find the size of the data table of contents, but can be by loarPE open exe file view, hope to help you,