I need to read the ".pdata" section of the x64 PE file.I saw that the structures in the ".pdata" section are different from one platform to another. http://msdn.microsoft.com/en-us/library/aa448751.aspxHe also says the same thing in the PE specifications document.But I do not understand what it is for ordinary windows (XP / Vista / Win7, etc.)
Anyone what it is?
The .pdata section is an array of RUNTIME_FUNCTION . It gives you a range of code (the first two members) and RVA for the corresponding UNWIND_INFO .
From there, you get information such as an RVA exception handler, prolog size, etc.
Source: https://habr.com/ru/post/911239/More articles:Changing params hash in Rails - ruby-on-railsMultiple IP addresses + domains + SSL certificates for one website - sslUsing xmlpeek in Nant script gives an odd error - nantUsing Typeahead from Twitter Bootstrap on a form (formtastic) - ruby ββ| fooobar.comXmlPoke and unique nodes - xpathThe variable color of a row in a table, but with two rows of data - jqueryPowerShell: Turn "Num Lock" on and off. - powershellEnable cookies in UIWebView (iPhone) - iphoneWhy should I use url.openStream instead of url.getContent? - javaProblem getting url.getContent () - javaAll Articles