PE file format

[Nathan Evans]

I'm looking to find the offset of the Code Section of any given EXE file.

An article called 'The Portable Executable File Format from Top to Bottom'
by Randy Kath mentions a PEFILE.h. (http://www.eccentrica.org/Mammon/Text/pefile.html)

I believe before i can get started i'll need this..

Hands?


Thanks!!
- Nathan

[Sven Blumenstein]

take a look here:
http://www.powerbasic.com/support/pb...ead.php?t=3763

------------------
e-mail (home): mailto:[email protected][email protected]</a>
e-mail (work): mailto:[email protected][email protected]</a>

[Nathan Evans]

Thank you Sven!

I modified some code written by Kevin Voell, and ended up with the following
PB/DLL app.

The app finds the location of the 'Code Section' and 'Base of Data'.

Many thanks,

- Nathan.

#COMPILE EXE
#INCLUDE "WIN32API.INC"
#INCLUDE "COMDLG32.INC"

FUNCTION PBMAIN()
   LOCAL ExeHdrInfo AS IMAGE_NT_HEADERS
   LOCAL DOSHdr AS Image_DOS_Header
   LOCAL hDLG  AS LONG
   Path$ = CURDIR$
   Style%    = %OFN_FILEMUSTEXIST OR %OFN_HIDEREADONLY OR %OFN_LONGNAMES
   RESULT% = OpenFileDialog(%HWND_DESKTOP, "Open File", f$, Path$, "Executable Files|*.EXE|All Files|*.*", "EXE",%OFN_FILEMUSTEXIST OR %OFN_HIDEREADONLY OR %OFN_LONGNAMES)
   X% = FREEFILE
   OPEN f$ FOR BINARY AS X%
   GET X%,, DosHdr
   SEEK X%, 0
   SEEK X%, DosHdr.e_lfanew + 1
   se% = SEEK(x%)
   GET X%,, ExeHdrInfo
   CLOSE X%

   DIALOG NEW %HWND_DESKTOP, "EXE FILE INFO", ,,200,80,%WS_SYSMENU, TO hDLG

     BaseOfCode$ = FORMAT$(ExeHdrInfo.OptionalHeader.BaseOfCode)
     CONTROL ADD LABEL, hDLG, 101, "Base of Code:" + BaseOfCode$, 10, 4, 200, 10
   
     BaseOfData$ = FORMAT$(ExeHdrInfo.OptionalHeader.BaseOfData)
     CONTROL ADD LABEL, hDLG, 101, "Base of Data: " + BaseOfData$, 10, 14, 200, 10
     
          CONTROL ADD LABEL, hDLG, 101, "Filename: " + "..." & RIGHT$(f$, 20), 10, 28, 200, 50
   
   DIALOG SHOW MODAL hDLG

END FUNCTION

[Paul Dwyer]

Why not go to the source.

Here is the Spec...
http://www.microsoft.com/hwdev/hardware/downPECOFF.htm?

------------------
Paul Dwyer
Network Engineer
Aussie in Tokyo