Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

what is the base relocation table in the PE file format?

I was analyzing format of one executable file, I found Base relocation table in image_optional_header, what is this base relocation table?

like image 906
santosh Awale Avatar asked Dec 15 '22 12:12

santosh Awale


1 Answers

The relocation table is a lookup table that lists all parts of the PE file that need patching when the file is loaded at a non-default base address.

Here is the microsoft spec on PE files: https://github.com/tpn/pdfs/blob/master/Microsoft%20Portable%20Executable%20and%20Common%20Object%20File%20Format%20Specification%20-%201999%20(pecoff).doc

And a good article: http://web.archive.org/web/20200806080448/http://www.csn.ul.ie/~caolan/pub/winresdump/winresdump/doc/pefile2.html

like image 196
Mark Jansen Avatar answered Dec 20 '22 21:12

Mark Jansen