flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
Vasilev Vjacheslav
i think better way to use struct macro
Code: struct IMAGE_NT_HEADERS .Signature dd ? .FileHeader IMAGE_FILE_HEADER .OptionalHeader IMAGE_OPTIONAL_HEADER ends substructures can be accessed with this code Code: ; .unth defined inside procedure lea edi,[.inth] mov eax,[edi+IMAGE_NT_HEADER.FileHeader.TimeDateStamp] Code: ; and if you have mapped pe-file, for example (edi - pointer to mapped file) mov eax,[edi+IMAGE_DOS_HEADER.e_lfanew] mov esi,edi add esi,eax mov ecx,[esi+IMAGE_NT_HEADER.FileHeader.TimeDateStamp] |
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2020, Tomasz Grysztar. Also on GitHub, YouTube, Twitter.
Website powered by rwasa.