MCPcopy Create free account
hub / github.com/NtQuery/Scylla / readPeSectionsFromProcess

Method readPeSectionsFromProcess

Scylla/PeParser.cpp:290–310  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

288}
289
290bool PeParser::readPeSectionsFromProcess()
291{
292 bool retValue = true;
293 DWORD_PTR readOffset = 0;
294
295 listPeSection.reserve(getNumberOfSections());
296
297 for (WORD i = 0; i < getNumberOfSections(); i++)
298 {
299 readOffset = listPeSection[i].sectionHeader.VirtualAddress + moduleBaseAddress;
300
301 listPeSection[i].normalSize = listPeSection[i].sectionHeader.Misc.VirtualSize;
302
303 if (!readSectionFromProcess(readOffset, listPeSection[i]))
304 {
305 retValue = false;
306 }
307 }
308
309 return retValue;
310}
311
312bool PeParser::readPeSectionsFromFile()
313{

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected