flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
Vasilev Vjacheslav 10 Mar 2005, 09:24
i think better way to use struct macro
Code: struct IMAGE_NT_HEADERS .Signature dd ? .FileHeader IMAGE_FILE_HEADER .OptionalHeader IMAGE_OPTIONAL_HEADER ends substructures can be accessed with this code Code: ; .unth defined inside procedure lea edi,[.inth] mov eax,[edi+IMAGE_NT_HEADER.FileHeader.TimeDateStamp] Code: ; and if you have mapped pe-file, for example (edi - pointer to mapped file) mov eax,[edi+IMAGE_DOS_HEADER.e_lfanew] mov esi,edi add esi,eax mov ecx,[esi+IMAGE_NT_HEADER.FileHeader.TimeDateStamp] |
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2025, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.