class PEdump::IMAGE_SECTION_HEADER

Public Instance Methods

flags_desc() click to toggle source
# File lib/pedump.rb, line 235
def flags_desc
  r = ''
  f = self.flags.to_i
  r << (f & 0x4000_0000 > 0 ? 'R' : '-')
  r << (f & 0x8000_0000 > 0 ? 'W' : '-')
  r << (f & 0x2000_0000 > 0 ? 'X' : '-')
  r << ' CODE'        if f & 0x20 > 0

  # section contains initialized data. Almost all sections except executable and the .bss section have this flag set
  r << ' IDATA'       if f & 0x40 > 0

  # section contains uninitialized data (for example, the .bss section)
  r << ' UDATA'       if f & 0x80 > 0

  r << ' DISCARDABLE' if f & 0x02000000 > 0
  r << ' SHARED'      if f & 0x10000000 > 0
  r
end
pack() click to toggle source
# File lib/pedump.rb, line 254
def pack
  to_a.pack FORMAT.tr('A','a') # pad names with NULL bytes on pack()
end