Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // referenced from https://stackoverflow.com/a/8711036/147511
- // see also: https://pastebin.com/pZL3Y7vM
- [StructLayout(LayoutKind.Explicit)]
- public struct COFF_PE
- {
- [FieldOffset(0x00)] public uint _PE_SIG;
- [FieldOffset(0x04)] public ImageFileMachine MachineType;
- [FieldOffset(0x06)] public ushort NumberOfSections;
- [FieldOffset(0x08)] public uint TimeDateStamp;
- [FieldOffset(0x0C)] public uint PointerToSymbolTable;
- [FieldOffset(0x10)] public uint NumberOfSymbols;
- [FieldOffset(0x14)] public ushort SizeOfOptionalHeader;
- [FieldOffset(0x16)] public ImageFileCharacteristics Characteristics;
- [FieldOffset(0x18)] public ushort Magic;
- [FieldOffset(0x1A)] public byte MajorLinkerVersion;
- [FieldOffset(0x1B)] public byte MinorLinkerVersion;
- [FieldOffset(0x1C)] public uint SizeOfCode;
- [FieldOffset(0x20)] public uint SizeOfInitializedData;
- [FieldOffset(0x24)] public uint SizeOfUninitializedData;
- [FieldOffset(0x28)] public uint AddressOfEntryPoint;
- [FieldOffset(0x2C)] public uint BaseOfCode;
- [FieldOffset(0x30)] public ulong __mixed;
- [FieldOffset(0x38)] public uint SectionAlignment;
- [FieldOffset(0x3C)] public uint FileAlignment;
- [FieldOffset(0x40)] public ushort MajorOperatingSystemVersion;
- [FieldOffset(0x42)] public ushort MinorOperatingSystemVersion;
- [FieldOffset(0x44)] public ushort MajorImageVersion;
- [FieldOffset(0x46)] public ushort MinorImageVersion;
- [FieldOffset(0x48)] public ushort MajorSubsystemVersion;
- [FieldOffset(0x4A)] public ushort MinorSubsystemVersion;
- [FieldOffset(0x4C)] public uint Win32VersionValue;
- [FieldOffset(0x50)] public uint SizeOfImage;
- [FieldOffset(0x54)] public uint SizeOfHeaders;
- [FieldOffset(0x58)] public uint CheckSum;
- [FieldOffset(0x5C)] public Subsystem Subsystem;
- [FieldOffset(0x5E)] public DllCharacteristics DllCharacteristics;
- };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement