แก้ไข

แชร์ผ่าน


PEReader.GetSectionData Method

Definition

Overloads

GetSectionData(String)

Loads the PE section with the specified name into memory and returns a memory block that spans the section.

GetSectionData(Int32)

Loads the PE section that contains the specified relative virtual address into memory and returns a memory block that starts at that address and ends at the end of the containing section.

GetSectionData(String)

Source:
PEReader.cs
Source:
PEReader.cs
Source:
PEReader.cs

Loads the PE section with the specified name into memory and returns a memory block that spans the section.

public:
 System::Reflection::PortableExecutable::PEMemoryBlock GetSectionData(System::String ^ sectionName);
public System.Reflection.PortableExecutable.PEMemoryBlock GetSectionData (string sectionName);
member this.GetSectionData : string -> System.Reflection.PortableExecutable.PEMemoryBlock
Public Function GetSectionData (sectionName As String) As PEMemoryBlock

Parameters

sectionName
String

The name of the section.

Returns

A memory block that spans the section, or an empty block if no section of the given sectionName exists in this PE image.

Exceptions

sectionName is null.

The PE image is not available.

Applies to

GetSectionData(Int32)

Source:
PEReader.cs
Source:
PEReader.cs
Source:
PEReader.cs

Loads the PE section that contains the specified relative virtual address into memory and returns a memory block that starts at that address and ends at the end of the containing section.

public:
 System::Reflection::PortableExecutable::PEMemoryBlock GetSectionData(int relativeVirtualAddress);
public System.Reflection.PortableExecutable.PEMemoryBlock GetSectionData (int relativeVirtualAddress);
member this.GetSectionData : int -> System.Reflection.PortableExecutable.PEMemoryBlock
Public Function GetSectionData (relativeVirtualAddress As Integer) As PEMemoryBlock

Parameters

relativeVirtualAddress
Int32

The Relative Virtual Address of the data to read.

Returns

A memory block that starts at relativeVirtualAddress and ends at the end of the containing section, or an empty block if relativeVirtualAddress doesn't represent a location in any of the PE sections of this PE image.

Exceptions

The PE headers contain invalid data.

An IO error occurred while reading from the underlying stream.

The PE image is not available.

relativeVirtualAddress is negative.

Applies to