From the above graphs I know there are 9
sections,开发者_Python百科but why in the 1st graph it shows 0900
?
How to read numbers in PE format?
The number is little endian, so the least significant byte comes first. Reverse the bytes to get the value in the order usually used by people, i.e. 0x0009.
I believe Matti Virkkunen answered your question. If you have any more questions regarding the format I have included the link to the specification.
PE COFF Specification
NumberOfSections The number of sections. This indicates the size of the section table, which immediately follows the headers.
-pg 12
精彩评论