PE解析節表

//得到所有節的信息:節名,加載後地址,加載後大小,文件中地址,文件中大小
void CPe32 ::GetSectionInfo()
{
                 IMAGE_SECTION_HEADER * pPeSectionHeader = m_pPeSectionHeader;
                 if (m_bSuccess)
                {
                                m_SectionInfo.pSection_info = new SECTION_INFO [m_lSectionNum]; //分配保存節表頭指針,析構函數中需要釋放該內存.
                                 for (int i = 0; i < m_lSectionNum; i++)
                                {
                                                memcpy(m_SectionInfo.pSection_info[i].cSectionName, pPeSectionHeader, 8); //保存節名
                                                m_SectionInfo.pSection_info[i].dwRawOffset = pPeSectionHeader->PointerToRawData; //保存節數據文件偏移
                                                m_SectionInfo.pSection_info[i].dwRawSize = pPeSectionHeader->SizeOfRawData;      //保存節數據文件大小
                                                m_SectionInfo.pSection_info[i].dwVirtualOffset = pPeSectionHeader->VirtualAddress; //保存節數據內存偏移
                                                m_SectionInfo.pSection_info[i].dwVirtualSize = pPeSectionHeader->Misc.VirtualSize; //保存節數據內存大小
                                                m_SectionInfo.pSection_info[i].dwCharacter = pPeSectionHeader->Characteristics;    //保存節屬性
                                                pPeSectionHeader++;  //跳到下一個節
                                                 if (m_pPeHeader->OptionalHeader.AddressOfEntryPoint > m_SectionInfo.pSection_info[i].dwVirtualOffset &&
                                                                m_pPeHeader->OptionalHeader.AddressOfEntryPoint < m_SectionInfo.pSection_info[i].dwVirtualOffset + m_SectionInfo.pSection_info[i].dwVirtualSize)
                                                {
                                                                m_iEntryPtInSec = i;  //保存入口地址所在節的索引
                                                }
                                }
                                m_SectionInfo.lSectionNum = m_lSectionNum;
                }
}