1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
/*
* HT Editor
* htpe.h
*
* Copyright (C) 1999-2002 Stefan Weyergraf
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#ifndef __HTPE_H__
#define __HTPE_H__
#include "formats.h"
#include "pestruct.h"
#include "htpeexp.h"
#include "htpeil.h"
#include "htpeimp.h"
#include "htpedimp.h"
#define DESC_PE "pe - win32 portable exe"
#define DESC_PE_HEADER "pe/header"
#define DESC_PE_IMPORTS "pe/imports"
#define DESC_PE_DIMPORTS "pe/delay-imports"
#define DESC_PE_EXPORTS "pe/exports"
#define DESC_PE_RESOURCES "pe/resources"
#define DESC_PE_IMAGE "pe/image"
#define DESC_PE_IL "pe/il"
#define ATOM_PE_MACHINES 0x50450000
#define ATOM_PE_MACHINES_STR "50450000"
#define ATOM_PE_OPTIONAL_MAGICS 0x50450001
#define ATOM_PE_OPTIONAL_MAGICS_STR "50450001"
#define ATOM_PE_SUBSYSTEMS 0x50450002
#define ATOM_PE_SUBSYSTEMS_STR "50450002"
#define ATOM_PE_CHARACTERISTICS 0x50450003
#define ATOM_PE_CHARACTERISTICS_STR "50450003"
#define ATOM_PE_DLL_CHARACTERISTICS 0x50450004
#define ATOM_PE_DLL_CHARACTERISTICS_STR "50450004"
#define ATOM_PE_SECTION_CHARACTERISTICS 0x50450005
#define ATOM_PE_SECTION_CHARACTERISTICS_STR "50450005"
extern format_viewer_if htpe_if;
struct pe_section_headers {
uint section_count;
COFF_SECTION_HEADER *sections;
};
struct ht_pe_shared_data {
FileOfs header_ofs;
COFF_HEADER coffheader;
uint16 opt_magic;
union {
struct {
COFF_OPTIONAL_HEADER32 header;
PE_OPTIONAL_HEADER32_NT header_nt;
} pe32;
struct {
COFF_OPTIONAL_HEADER64 header;
PE_OPTIONAL_HEADER64_NT header_nt;
} pe64;
};
pe_section_headers sections;
ht_pe_il *il;
ht_pe_export exports;
ht_pe_import imports;
ht_pe_import dimports;
ht_format_viewer *v_header;
ht_view *v_exports;
ht_view *v_imports;
ht_view *v_dimports;
ht_view *v_resources;
ht_view *v_il;
ht_format_viewer *v_image;
};
/*
* CLASS ht_pe
*/
class ht_pe: public ht_format_group {
protected:
bool loc_enum;
public:
void init(Bounds *b, File *file, format_viewer_if **ifs, ht_format_group *format_group, FileOfs header_ofs);
virtual void done();
/* overwritten */
virtual void loc_enum_start();
virtual bool loc_enum_next(ht_format_loc *loc);
};
bool pe_rva_to_section(pe_section_headers *section_headers, RVA rva, int *section);
bool pe_rva_to_ofs(pe_section_headers *section_headers, RVA rva, FileOfs *ofs);
bool pe_rva_is_valid(pe_section_headers *section_headers, RVA rva);
bool pe_rva_is_physical(pe_section_headers *section_headers, RVA rva);
bool pe_ofs_to_rva(pe_section_headers *section_headers, FileOfs ofs, RVA *rva);
bool pe_ofs_to_section(pe_section_headers *section_headers, FileOfs ofs, int *section);
bool pe_ofs_to_rva_and_section(pe_section_headers *section_headers, FileOfs ofs, RVA *rva, int *section);
bool pe_section_name_to_section(pe_section_headers *section_headers, const char *name, int *section);
#endif /* !__HTPE_H__ */
|
