Win32 API 日本語リファレンス
ホーム › System.Diagnostics.Debug › IMAGE_SECTION_HEADER

IMAGE_SECTION_HEADER

構造体
📘 Microsoft Learn (日本語) · English
サイズx64: 40 バイト / x86: 40 バイト

サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。

フィールド

フィールド型サイズx64x86説明
NameBYTE8+0+0セクション名を表す8バイトのASCII配列(NULL終端でない場合あり)。
Misc_Misc_e__Union4+8+8物理アドレスまたは仮想サイズを格納する共用体。
VirtualAddressDWORD4+12+12セクションのメモリ上RVA。
SizeOfRawDataDWORD4+16+16ファイル上の生データサイズ(FileAlignment整列)。
PointerToRawDataDWORD4+20+20生データへのファイルオフセット。
PointerToRelocationsDWORD4+24+24再配置情報へのファイルオフセット。
PointerToLinenumbersDWORD4+28+28行番号情報へのファイルオフセット(廃止)。
NumberOfRelocationsWORD2+32+32再配置エントリ数。
NumberOfLinenumbersWORD2+34+34行番号エントリ数(廃止)。
CharacteristicsIMAGE_SECTION_CHARACTERISTICS4+36+36セクション特性を示すIMAGE_SECTION_CHARACTERISTICSフラグ。

共用体: _Misc_e__Union x64 4B / x86 4B

フィールド型サイズx64x86
PhysicalAddressDWORD4+0+0
VirtualSizeDWORD4+0+0

各言語での定義

#include <windows.h>

// IMAGE_SECTION_HEADER  (x64 40 / x86 40 バイト)
typedef struct IMAGE_SECTION_HEADER {
    BYTE Name[8];
    _Misc_e__Union Misc;
    DWORD VirtualAddress;
    DWORD SizeOfRawData;
    DWORD PointerToRawData;
    DWORD PointerToRelocations;
    DWORD PointerToLinenumbers;
    WORD NumberOfRelocations;
    WORD NumberOfLinenumbers;
    IMAGE_SECTION_CHARACTERISTICS Characteristics;
} IMAGE_SECTION_HEADER;
using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct IMAGE_SECTION_HEADER
{
    [MarshalAs(UnmanagedType.ByValArray, SizeConst = 8)] public byte[] Name;
    public _Misc_e__Union Misc;
    public uint VirtualAddress;
    public uint SizeOfRawData;
    public uint PointerToRawData;
    public uint PointerToRelocations;
    public uint PointerToLinenumbers;
    public ushort NumberOfRelocations;
    public ushort NumberOfLinenumbers;
    public uint Characteristics;
}
Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure IMAGE_SECTION_HEADER
    <MarshalAs(UnmanagedType.ByValArray, SizeConst:=8)> Public Name() As Byte
    Public Misc As _Misc_e__Union
    Public VirtualAddress As UInteger
    Public SizeOfRawData As UInteger
    Public PointerToRawData As UInteger
    Public PointerToRelocations As UInteger
    Public PointerToLinenumbers As UInteger
    Public NumberOfRelocations As UShort
    Public NumberOfLinenumbers As UShort
    Public Characteristics As UInteger
End Structure
import ctypes
from ctypes import wintypes

class IMAGE_SECTION_HEADER(ctypes.Structure):
    _fields_ = [
        ("Name", ctypes.c_ubyte * 8),
        ("Misc", _Misc_e__Union),
        ("VirtualAddress", wintypes.DWORD),
        ("SizeOfRawData", wintypes.DWORD),
        ("PointerToRawData", wintypes.DWORD),
        ("PointerToRelocations", wintypes.DWORD),
        ("PointerToLinenumbers", wintypes.DWORD),
        ("NumberOfRelocations", ctypes.c_ushort),
        ("NumberOfLinenumbers", ctypes.c_ushort),
        ("Characteristics", wintypes.DWORD),
    ]
#[repr(C)]
pub struct IMAGE_SECTION_HEADER {
    pub Name: [u8; 8],
    pub Misc: _Misc_e__Union,
    pub VirtualAddress: u32,
    pub SizeOfRawData: u32,
    pub PointerToRawData: u32,
    pub PointerToRelocations: u32,
    pub PointerToLinenumbers: u32,
    pub NumberOfRelocations: u16,
    pub NumberOfLinenumbers: u16,
    pub Characteristics: u32,
}
import "golang.org/x/sys/windows"

type IMAGE_SECTION_HEADER struct {
	Name [8]byte
	Misc _Misc_e__Union
	VirtualAddress uint32
	SizeOfRawData uint32
	PointerToRawData uint32
	PointerToRelocations uint32
	PointerToLinenumbers uint32
	NumberOfRelocations uint16
	NumberOfLinenumbers uint16
	Characteristics uint32
}
type
  IMAGE_SECTION_HEADER = record
    Name: array[0..7] of Byte;
    Misc: _Misc_e__Union;
    VirtualAddress: DWORD;
    SizeOfRawData: DWORD;
    PointerToRawData: DWORD;
    PointerToRelocations: DWORD;
    PointerToLinenumbers: DWORD;
    NumberOfRelocations: Word;
    NumberOfLinenumbers: Word;
    Characteristics: DWORD;
  end;
const IMAGE_SECTION_HEADER = extern struct {
    Name: [8]u8,
    Misc: _Misc_e__Union,
    VirtualAddress: u32,
    SizeOfRawData: u32,
    PointerToRawData: u32,
    PointerToRelocations: u32,
    PointerToLinenumbers: u32,
    NumberOfRelocations: u16,
    NumberOfLinenumbers: u16,
    Characteristics: u32,
};
type
  IMAGE_SECTION_HEADER {.bycopy.} = object
    Name: array[8, uint8]
    Misc: _Misc_e__Union
    VirtualAddress: uint32
    SizeOfRawData: uint32
    PointerToRawData: uint32
    PointerToRelocations: uint32
    PointerToLinenumbers: uint32
    NumberOfRelocations: uint16
    NumberOfLinenumbers: uint16
    Characteristics: uint32
struct IMAGE_SECTION_HEADER
{
    ubyte[8] Name;
    _Misc_e__Union Misc;
    uint VirtualAddress;
    uint SizeOfRawData;
    uint PointerToRawData;
    uint PointerToRelocations;
    uint PointerToLinenumbers;
    ushort NumberOfRelocations;
    ushort NumberOfLinenumbers;
    uint Characteristics;
}

HSP用 定義

HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。

; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; IMAGE_SECTION_HEADER サイズ: 40 バイト(x64)
dim st, 10    ; 4byte整数×10(構造体サイズ 40 / 4 切り上げ)
; Name : BYTE (+0, 8byte)  varptr(st)+0 を基点に操作(8byte:入れ子/配列)
; Misc : _Misc_e__Union (+8, 4byte)  varptr(st)+8 を基点に操作(4byte:入れ子/配列)
; VirtualAddress : DWORD (+12, 4byte)  st.3 = 値  /  値 = st.3   (lpoke/lpeek も可)
; SizeOfRawData : DWORD (+16, 4byte)  st.4 = 値  /  値 = st.4   (lpoke/lpeek も可)
; PointerToRawData : DWORD (+20, 4byte)  st.5 = 値  /  値 = st.5   (lpoke/lpeek も可)
; PointerToRelocations : DWORD (+24, 4byte)  st.6 = 値  /  値 = st.6   (lpoke/lpeek も可)
; PointerToLinenumbers : DWORD (+28, 4byte)  st.7 = 値  /  値 = st.7   (lpoke/lpeek も可)
; NumberOfRelocations : WORD (+32, 2byte)  wpoke st,32,値  /  値 = wpeek(st,32)
; NumberOfLinenumbers : WORD (+34, 2byte)  wpoke st,34,値  /  値 = wpeek(st,34)
; Characteristics : IMAGE_SECTION_CHARACTERISTICS (+36, 4byte)  st.9 = 値  /  値 = st.9   (lpoke/lpeek も可)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。
; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global IMAGE_SECTION_HEADER
    #field byte Name 8
    #field byte Misc 4
    #field int VirtualAddress
    #field int SizeOfRawData
    #field int PointerToRawData
    #field int PointerToRelocations
    #field int PointerToLinenumbers
    #field short NumberOfRelocations
    #field short NumberOfLinenumbers
    #field int Characteristics
#endstruct

stdim st, IMAGE_SECTION_HEADER        ; NSTRUCT 変数を確保
st->VirtualAddress = 100
mes "VirtualAddress=" + st->VirtualAddress
; ※union フィールドは byte 列で確保(NSTRUCT は union 非対応)。必要に応じ手動でアクセス。