PE解析节表

//得到所有节的信息:节名,加载后地址,加载后大小,文件中地址,文件中大小
void CPe32 ::GetSectionInfo()
{
                 IMAGE_SECTION_HEADER * pPeSectionHeader = m_pPeSectionHeader;
                 if (m_bSuccess)
                {
                                m_SectionInfo.pSection_info = new SECTION_INFO [m_lSectionNum]; //分配保存节表头指针,析构函数中需要释放该内存.
                                 for (int i = 0; i < m_lSectionNum; i++)
                                {
                                                memcpy(m_SectionInfo.pSection_info[i].cSectionName, pPeSectionHeader, 8); //保存节名
                                                m_SectionInfo.pSection_info[i].dwRawOffset = pPeSectionHeader->PointerToRawData; //保存节数据文件偏移
                                                m_SectionInfo.pSection_info[i].dwRawSize = pPeSectionHeader->SizeOfRawData;      //保存节数据文件大小
                                                m_SectionInfo.pSection_info[i].dwVirtualOffset = pPeSectionHeader->VirtualAddress; //保存节数据内存偏移
                                                m_SectionInfo.pSection_info[i].dwVirtualSize = pPeSectionHeader->Misc.VirtualSize; //保存节数据内存大小
                                                m_SectionInfo.pSection_info[i].dwCharacter = pPeSectionHeader->Characteristics;    //保存节属性
                                                pPeSectionHeader++;  //跳到下一个节
                                                 if (m_pPeHeader->OptionalHeader.AddressOfEntryPoint > m_SectionInfo.pSection_info[i].dwVirtualOffset &&
                                                                m_pPeHeader->OptionalHeader.AddressOfEntryPoint < m_SectionInfo.pSection_info[i].dwVirtualOffset + m_SectionInfo.pSection_info[i].dwVirtualSize)
                                                {
                                                                m_iEntryPtInSec = i;  //保存入口地址所在节的索引
                                                }
                                }
                                m_SectionInfo.lSectionNum = m_lSectionNum;
                }
}