Timeline for How do I get all sections in a PE file using C++?
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 22, 2021 at 18:44 | comment | added | blabb | maybe you can explain why you think so ??? it is a simple macro that retrieves the position of First Section in the PE header. anyway i edited in a modified source which dumps at start of each section | |
| Dec 22, 2021 at 18:44 | history | edited | blabb | CC BY-SA 4.0 |
added 3845 characters in body
|
| Dec 21, 2021 at 12:52 | vote | accept | rafa_br34 | ||
| Dec 21, 2021 at 12:39 | comment | added | rafa_br34 | I'm using the PETools editor, I would like to get the segments the program has, and their information, I just need to find the right offset for the array. edit: sorry for the late response, thought StackOverflow would notify me, I don't think the IMAGE_FIRST_SECTION works for files on the disk | |
| Dec 21, 2021 at 8:56 | history | edited | 0xC0000022L♦ | CC BY-SA 4.0 |
Spelling, formatting ... also added link to the mentioned Python module
|
| Dec 21, 2021 at 8:52 | comment | added | 0xC0000022L♦ | Which PE editor you make it sounds as if there is a single one? As for PE-parsing you could have a look at pe-parse with which I worked a bit due to work with another project by the same group: uthenticode. Either way, a PE parser can be written easily and portably in C++. The parsing is no different in memory and on disk. Just the calculation of offsets differs due to file vs. section alignment. | |
| Dec 21, 2021 at 6:07 | history | edited | blabb | CC BY-SA 4.0 |
added 208 characters in body
|
| Dec 21, 2021 at 6:00 | comment | added | rafa_br34 | yes, I have the DOS and NT header already what I want are the sections info, like when you use alt+1 in PE editor and go-to sections | |
| Dec 21, 2021 at 5:20 | history | edited | blabb | CC BY-SA 4.0 |
added 1416 characters in body
|
| Dec 21, 2021 at 4:45 | history | answered | blabb | CC BY-SA 4.0 |