ovako izgleda loaded_image:
Code:
typedef struct _LOADED_IMAGE {
PSTR ModuleName;
HANDLE hFile;
PUCHAR MappedAddress;
PIMAGE_NT_HEADERS32 FileHeader;
PIMAGE_SECTION_HEADER LastRvaSection;
ULONG NumberOfSections;
PIMAGE_SECTION_HEADER Sections;
ULONG Characteristics;
BOOLEAN fSystemImage;
BOOLEAN fDOSImage;
BOOLEAN fReadOnly;
UCHAR Version;
LIST_ENTRY Links;
ULONG SizeOfImage; } LOADED_IMAGE,
*PLOADED_IMAGE;
typedef struct _LOADED_IMAGE {
PSTR ModuleName;
HANDLE hFile;
PUCHAR MappedAddress;
PIMAGE_NT_HEADERS32 FileHeader;
PIMAGE_SECTION_HEADER LastRvaSection;
ULONG NumberOfSections;
PIMAGE_SECTION_HEADER Sections;
ULONG Characteristics;
BOOLEAN fSystemImage;
BOOLEAN fDOSImage;
BOOLEAN fReadOnly;
UCHAR Version;
LIST_ENTRY Links;
ULONG SizeOfImage; } LOADED_IMAGE,
*PLOADED_IMAGE;
znaci ako imam var loadedImg:LOADED_IMAGE; i onda loadedImg.Sections.VirtualAddress sadrzi adresu od prve sekcije a to je .code/.text!
E sad, kako tako dobit VirtualAddress od druge sekcije, probao sam ovako nekako loadedImg.Sections[1].VirtualAddress ali mi delphi javlja gresku u kodu: Array Type Required??
z