I filled (read from stream) my structure with valid data from
PE image (x32/x64):
Delphi-Quellcode:
IMAGE_PE_INFO =
record
DOS: IMAGE_DOS_HEADER;
PE: IMAGE_FILE_HEADER;
Optional: IMAGE_OPTIONAL_HEADER;
end;
I'm also interested in another data, like:
- sections,
- CLR info (if is .NET crapware),
- support for 16-bit executables,
- import/exports (optional).
For section I found IMAGE_SECTION_HEADER and ImageRvaToSection, but I don't know how to
Don't know how to rest too