关于PE的魔数 [英] About the magic number of PE

查看:103
本文介绍了关于PE的魔数的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

0x10b : PE32 executable
0×107 : ROM image
0x20b : PE32+ (64 bit) executable

什么是ROM image?

推荐答案

有趣的问题,我涉嫌操纵PE文件,但从未注意到.

Interesting question, I've dabbled with manipulating PE files but never noticed that.

以下是我认为它们的用途:可以就地"(XIP)执行ROM映像,如果在MSDN中搜索"rom映像",则会在Windows Mobile中找到许多对其的引用.和较旧的Windows CE工具,例如 Rom映像创建.

Here's what I believe they are used for: A ROM image can be executed 'in place' (XIP), if you search MSDN for "rom image", you'll find a number of references to it in the Windows Mobile and older Windows CE tools, e.g. Rom Image Creation.

因此,可以直接从ROM执行ROM映像,而不必将其加载并重新放置在RAM中,这对于资源有限的移动设备非常方便.

A ROM image can thus be executed directly from the ROM without having to load and relocate it in RAM, which is pretty handy for a mobile device with limited resources.

这篇关于关于PE的魔数的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆