1
全部 -理解鏈接器映射文件(MS Visual Studio 2005)
我想了解由MS Visual Studio 2005鏈接器生成的映射文件的第一部分。我知道這與內存部分有關,但有人可以幫我解密嗎?
Timestamp is 4b4f8d2b (Thu Jan 14 14:31:23 2010)
Preferred load address is 00400000
Start Length Name Class
0001:00000000 0028b752H .text CODE
0002:00000000 000001b4H .idata$5 DATA
0002:000001b4 00000004H .CRT$XCA DATA
0002:000001b8 00000004H .CRT$XCAA DATA
0002:000001bc 00000004H .CRT$XCC DATA
0002:000001c0 00000004H .CRT$XCZ DATA
0002:000001c4 00000004H .CRT$XIA DATA
0002:000001c8 00000004H .CRT$XIAA DATA
0002:000001cc 00000004H .CRT$XIC DATA
0002:000001d0 00000004H .CRT$XIZ DATA
0002:000001d8 00025288H .rdata DATA
0002:00025460 00000004H .rdata$sxdata DATA
0002:00025464 00000004H .rtc$IAA DATA
0002:00025468 00000004H .rtc$IZZ DATA
0002:0002546c 00000004H .rtc$TAA DATA
0002:00025470 00000004H .rtc$TZZ DATA
0002:00025478 0000007cH .xdata$x DATA
0002:000254f4 00000028H .idata$2 DATA
0002:0002551c 00000014H .idata$3 DATA
0002:00025530 000001b4H .idata$4 DATA
0002:000256e4 00000542H .idata$6 DATA
0002:00025c26 00000000H .edata DATA
0003:00000000 000f070cH .data DATA
0003:000f0720 001f1280H .bss DATA
謝謝。結果維基百科對這個主題有一些很好的解讀:http://en.wikipedia.org/wiki/Portable_Executable – jHops 2010-03-14 01:19:04
該規範更好。 http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx – 2010-03-14 10:12:45