,"PE文件的两种状态.",,,,"本节练习:"

,"PE文件为什么要分节.
",,,,,"1、找出所有DOC头数据,并统计DOC头大小.
","手动解析:PE文件",,,,,"2、找出所有标准PE头数据,并统计标准PE头大小.
",,,,,"3、找出所有可选PE头数据,并统计可选PE头大小.
"4G",,,"4G","1、节省硬盘空间",,,,,,,,,,,,,,,,,,,,,,,,,,,,"硬盘对齐:200h",,,,,,,,,,,,"内存对齐:1000h",,,,,,,"多开:QQ小号.
.
.
小号.
.
.
","数据:只读",,"100","数据:可读可写",,,"数据:可读可写",,,,,,,,,,"数据:可读可写",,"100","数据:可读可写",,,"数据:可读可写",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"一、PE为什么要分节","1、节省硬盘空间.
(这个不是决定的,由编译器决定)","2、一个应用程序多开","3、理解FileBuffer和ImageBuffer","二、PE文件分了很多个节,那每个节在文件中从哪里开始有多大在内存中从哪里开始,有多大由谁决定","一个可执行文件所有的密码都在这个结构中.
"