I was analyzing format of one executable file, I found Base relocation table in image_optional_header
, what is this base relocation table?
The relocation table is a lookup table that lists all parts of the PE file that need patching when the file is loaded at a non-default base address.
Here is the microsoft spec on PE files: https://github.com/tpn/pdfs/blob/master/Microsoft%20Portable%20Executable%20and%20Common%20Object%20File%20Format%20Specification%20-%201999%20(pecoff).doc
And a good article: http://web.archive.org/web/20200806080448/http://www.csn.ul.ie/~caolan/pub/winresdump/winresdump/doc/pefile2.html
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With