![]() The attached pictures show how this is parsed/visualized for my PropEdit.exe (but the solution is generic and works with any 32-bit PE file). ImageSectionHeaders: IMAGE_SECTION_HEADER ImageNtHeaders32: IMAGE_NT_HEADERS32 :ImageDosHeader._lfanew OriginalFirstThunk_ImportLookupTable_RVA: UInt32 įirstThunk_ImportAddressTable_RVA: UInt32 ![]() Misc_PhysicalAddressOrVirtualSize: UInt32 For PE files this allows mapping RVA (relative virtual addresses) to absolute file offsets.Īll of the file structure is given in a declarative language, called HxD structure definition (HSD).Ī functional example for parsing PE headers is given below:ĭataDirectory: IMAGE_DATA_DIRECTORY There is also a feature to map pointers using a function (currently only built-in ones). PE (portable executable) files are currently the template to determine the necessary functionality (but other file formats like PNG-files and matching features will be added).Ĭurrently, you can define dynamic arrays and structures with dynamic size, where other parts/fields in the file define the size, and pointers are dereferenced automatically. P.S.: If you like it, please star the code on GitHub or give it a (good □) rating on download sites.Ĭurrently, I am working again (as mentioned above) on a feature for creating a structure viewer/editor. Importing and exporting of Intel Hex, Motorola S-RecordsĮxporting to Pascal, C, Java, C#, VB.NET, PureBasic, but also HTML, RTF, and TeXĬhecksum and hash generation and validationĬurrently, available in version 2.4 and 17 languages: HxD download. Search and replace with support for various data types Open source plugin-framework to extend with new, custom type converters. ![]() Memory editor (full support for 64 and 32-bit)ĭata folding, for easier overview and hiding inaccessible regionsĬonverts current data into many types, for editing and viewing HxD is a Freeware hex, disk and memory editor, that is fast and can handle files of arbitrary size (up to 8 EiB).ĭisk editor (automatically unmounts drives as necessary when saving changes) ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |