C语言读取PE文件信息（1）

 1 #include<stdio.h>
 2 #include<windows.h>
 3 
 4 char *strPath="C:/c1_hwv3/Debug/c1_hwv3.exe";
 5 
 6 int main()
 7 {
 8     IMAGE_DOS_HEADER myDosHeader;
 9     LONG e_lfanew;
10     FILE *pFile;
11     pFile=fopen(strPath,"rb+");
12 
13     fread(&myDosHeader,sizeof(IMAGE_DOS_HEADER),1,pFile);
14     e_lfanew=myDosHeader.e_lfanew;
15 
16     IMAGE_FILE_HEADER myFileHeader;
17     int nSectionCount;
18 
19     fseek(pFile,(e_lfanew+sizeof(DWORD)),SEEK_SET);
20     fread(&myFileHeader,sizeof(IMAGE_FILE_HEADER),1,pFile);
21     nSectionCount=myFileHeader.NumberOfSections;
22 
23     IMAGE_SECTION_HEADER *pmySectionHeader=
24         (IMAGE_SECTION_HEADER *)calloc(nSectionCount,sizeof(IMAGE_SECTION_HEADER));
25     fseek(pFile,(e_lfanew+sizeof(IMAGE_NT_HEADERS)),SEEK_SET);
26     fread(pmySectionHeader,sizeof(IMAGE_SECTION_HEADER),nSectionCount,pFile);
27 
28     for(int i=0;i<nSectionCount;i++,pmySectionHeader++)
29     {
30         printf("Name: %s\n", pmySectionHeader->Name);
31         printf("union_PhysicalAddress: %08x\n", pmySectionHeader->Misc.PhysicalAddress);
32         printf("union_VirtualSize: %04x\n", pmySectionHeader->Misc.VirtualSize);
33         printf("VirtualAddress: %08x\n", pmySectionHeader->VirtualAddress);
34         printf("SizeOfRawData: %08x\n", pmySectionHeader->SizeOfRawData);
35         printf("PointerToRawData: %04x\n", pmySectionHeader->PointerToRawData);
36         printf("PointerToRelocations: %04x\n", pmySectionHeader->PointerToRelocations);
37         printf("PointerToLinenumbers: %04x\n", pmySectionHeader->PointerToLinenumbers);
38         printf("NumberOfRelocations: %04x\n", pmySectionHeader->NumberOfRelocations);
39         printf("NumberOfLinenumbers: %04x\n", pmySectionHeader->NumberOfLinenumbers);
40         printf("Charateristics: %04x\n", pmySectionHeader->Characteristics);
41     }
42 //    pmySectionHeader-=m_nSectionCount;
43 
44     if(pmySectionHeader!=NULL)
45     {
46         free(pmySectionHeader);
47         pmySectionHeader=NULL;
48     }
49 
50     fclose(pFile);
51     return 0;
52 }