Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- typedef struct _FILE_HEADER
- {
- ULONG Sig;
- USHORT Machine; // 0 = any machine
- USHORT NumberOfSections;
- ULONG PointerToSymbolTable; // RVA of symbol table
- ULONG NumberOfSymbols; // Number of symbols in table
- ULONG SizeOfCode; // size of .text in bytes
- ULONG SizeOfInitializedData;
- ULONG SizeOfUninitializedData;
- ULONG AddressOfEntryPoint; // RVA of entry point
- ULONG BaseOfCode; // base of .text
- ULONG BaseOfInitializedData;
- ULONG ImageBase;
- ULONG SectionAlignment;
- USHORT FileAlignment;
- ULONG SizeOfImage; // size of image in bytes
- ULONG Checksum; // checksum
- USHORT Subsystem; // Console or no?
- USHORT DllCharacteristics; // DLL properties
- ULONG SizeOfStack; // size of stack, in bytes
- ULONG SizeOfHeap; // size of heap, in bytes
- USHORT NumberOfDataDirectories
- IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
- }
- typedef struct _IMAGE_DATA_DIRECTORY {
- DWORD VirtualAddress; // RVA of table
- DWORD Size; // size of table
- } IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;
- 0: Export directory
- 1: Import directory
- 2: Resource directory
- 3: Exception directory
- 4: Security directory
- 5: Base relocation table
- 6: Debug directory
- 7: Description string
- typedef struct _IMAGE_EXPORT_DIRECTORY
- {
- uint32_t Characteristics;
- uint32_t TimeDateStamp;
- uint16_t MajorVersion;
- uint16_t MinorVersion;
- uint32_t Name;
- uint32_t Base;
- uint32_t NumberOfFunctions;
- uint32_t NumberOfNames;
- uint32_t** AddressOfFunctions;
- uint32_t** AddressOfNames;
- uint16_t** AddressOfNameOrdinal;
- }IMAGE_EXPORT_DIRECTORY,*PIMAGE_EXPORT_DIRECTORY;
Add Comment
Please, Sign In to add comment