JCL Help:PeMapImgSections64@TStream@Int64@TImageNtHeaders64@TImageSectionHeaderArray
From Project JEDI Wiki
Jump to navigationJump to searchJCL Help: PeMapImgSections64 Function
[+] JclPeImage.pas Functions
Search in JCL Help
Search in all projects
Summary
Obtains an array containing all the PE image sections of a 64-bit PE image.
Pascal
function PeMapImgSections64(Stream: TStream; const NtHeaders64Position: Int64; const NtHeaders64: TImageNtHeaders64; out ImageSectionHeaders: TImageSectionHeaderArray): Int64; overload;
Parameters
Parameters | Description |
Stream | The stream where the PE image sections are stored. |
NtHeaders64Position | The position in stream where the PE image starts. |
NtHeaders64 | PE image header used to compute where the first PE image section starts. |
ImageSectionHeaders | Receives the array of PE image sections read from the stream. |
Return Value
If successful, it returns the computed stream position where the first PE image section starts, otherwise -1.
Description
Reads from the given *Stream* the PE image sections of a 64-bit PE image that starts at the *NtHeaders64Position* position. The PE image header information is provided by the programmer using *NtHeaders64* and it is used by the function to compute stream position of the first PE image section.
About
Unit
Contribute to this help topic
This documentation wiki is based on the collaborative effort of Project JEDI users. Your edits are welcome in order to improve documentation quality: edit this page