erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

why the size of image is different from using get_memory_mapped_image

zjgcjy opened this issue · comments

As I use mem = pe.get_memory_mapped_image() but the len(mem) does not equal to Size of Image defined in PE Optional header.
The difference is 0x200. The environment is a x64 driver on windows 10.