| View previous topic :: View next topic |
| Author |
Message |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Mon Nov 05, 2007 9:37 am Post subject: address quesitons |
|
|
Well, is there an address(s) that are common to all programs. Or like a beginning and ending address that is always the same for a section. I forget all the section names or exactly what they're for, but I know .data is one.
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Mon Nov 05, 2007 11:00 am Post subject: |
|
|
There are different sections for different types of files. Different compilers use different sections as well. You can, in some cases, define your own section names if you're compiler allows it, and packers, encryptors, etc. can also rename sections too.
Take a look at this article about the PE file format:
http://msdn.microsoft.com/msdnmag/issues/02/02/PE/default.aspx
_________________
- Retired. |
|
| Back to top |
|
 |
appalsap Moderator
Reputation: 0
Joined: 27 Apr 2006 Posts: 6753 Location: Pakistan
|
Posted: Mon Nov 05, 2007 11:03 am Post subject: |
|
|
The most common section names are the ones masm and vc++ use, .code, .data, .code., .rsrc etc.
_________________
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Mon Nov 05, 2007 5:24 pm Post subject: |
|
|
Ok, but are there specific address ranges in there that are the same in different programs?
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
Flyte Peanuts!!!!
Reputation: 6
Joined: 19 Apr 2006 Posts: 1887 Location: Canada
|
Posted: Mon Nov 05, 2007 5:34 pm Post subject: |
|
|
| oib111 wrote: | | Ok, but are there specific address ranges in there that are the same in different programs? |
The locations of the system dll's (assuming there are no packers) and kernel space is the same between each process (not between each OS build though).
|
|
| Back to top |
|
 |
|