C# (CSharp) DissectPECOFFBinary MSDOS20Section示例

示例#1

文件： OptionalHeaderWindowsSpecificPE32.cs 项目： lsmithmier/DissectPECOFFBinary

 public static long StartingPosition(MSDOS20Section msdos20Section)
 {
     return(msdos20Section.OffsetToPEHeader
            + (Int64)Marshal.SizeOf <PESignature>()
            + (Int64)Marshal.SizeOf <COFFHeader>()
            + (Int64)Marshal.SizeOf <COFFOptionalHeaderStandardFields>());
 }

示例#2

文件： OptionalHeaderDataDirectories.cs 项目： lsmithmier/DissectPECOFFBinary

 public static long StartingPosition(MSDOS20Section msdos20Section, COFFOptionalHeaderStandardFields coffOptionalHeaderStandardFields)
 {
     if (coffOptionalHeaderStandardFields.Magic == 0x10b)
     {
         return(msdos20Section.OffsetToPEHeader
                + (Int64)Marshal.SizeOf <PESignature>()
                + (Int64)Marshal.SizeOf <COFFHeader>()
                + (Int64)Marshal.SizeOf <COFFOptionalHeaderStandardFields>()
                + (Int64)Marshal.SizeOf <OptionalHeaderWindowsSpecificPE32>());
     }
     else
     {
         return(msdos20Section.OffsetToPEHeader
                + (Int64)Marshal.SizeOf <PESignature>()
                + (Int64)Marshal.SizeOf <COFFHeader>()
                + (Int64)Marshal.SizeOf <COFFOptionalHeaderStandardFields>()
                + (Int64)Marshal.SizeOf <OptionalHeaderWindowsSpecificPE32Plus>());
     }
 }

示例#3

 public static Int64 StartingPosition(MSDOS20Section msdosSection)
 {
     return(msdosSection.OffsetToPEHeader + (Int64)Marshal.SizeOf <PESignature>());
 }

示例#4

文件： PESignature.cs 项目： lsmithmier/DissectPECOFFBinary

 public static Int64 StartingPosition(MSDOS20Section msdos20Section)
 {
     return(msdos20Section.OffsetToPEHeader);
 }