![]() |
Delphi-Version: XE5
How to get PE sections and some other info
I filled (read from stream) my structure with valid data from PE image (x32/x64):
Delphi-Quellcode:
I'm also interested in another data, like:
IMAGE_PE_INFO = record
DOS: IMAGE_DOS_HEADER; PE: IMAGE_FILE_HEADER; Optional: IMAGE_OPTIONAL_HEADER; end; - sections, - CLR info (if is .NET crapware), - support for 16-bit executables, - import/exports (optional). For section I found IMAGE_SECTION_HEADER and ImageRvaToSection, but I don't know how to :( Don't know how to rest too :( |
AW: How to get PE sections and some other info
|
Alle Zeitangaben in WEZ +1. Es ist jetzt 21:23 Uhr. |
Powered by vBulletin® Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO © 2011, Crawlability, Inc.
Delphi-PRAXiS (c) 2002 - 2023 by Daniel R. Wolf, 2024-2025 by Thomas Breitkreuz