From e2475c34dd2cd7f4bbbe4b7e6ad16eb495bf452a Mon Sep 17 00:00:00 2001 From: midipix Date: Tue, 26 May 2015 22:57:56 -0400 Subject: pe_get_image_section_tbl_addr() and pe_get_image_named_section_addr(): initial commit. --- src/headers/pe_get_image_section_tbl_addr.c | 58 +++++++++++++++++++++++++++++ 1 file changed, 58 insertions(+) create mode 100644 src/headers/pe_get_image_section_tbl_addr.c (limited to 'src/headers') diff --git a/src/headers/pe_get_image_section_tbl_addr.c b/src/headers/pe_get_image_section_tbl_addr.c new file mode 100644 index 0000000..01dabb5 --- /dev/null +++ b/src/headers/pe_get_image_section_tbl_addr.c @@ -0,0 +1,58 @@ +/*****************************************************************************/ +/* pemagination: a (virtual) tour into portable bits and executable bytes */ +/* Copyright (C) 2013,2014,2015 Z. Gilboa */ +/* Released under GPLv2 and GPLv3; see COPYING.PEMAGINE. */ +/*****************************************************************************/ + +#include +#include +#include +#include +#include "pe_impl.h" + +pe_api +struct pe_sec_hdr * pe_get_image_section_tbl_addr (const void * base) +{ + struct pe_coff_file_hdr * coff; + union pe_opt_hdr * opt; + + if (!(coff = pe_get_image_coff_hdr_addr(base))) + return 0; + + if (!(opt = pe_get_image_opt_hdr_addr(base))) + return 0; + + return (struct pe_sec_hdr *)((char *)opt + *(uint16_t *)coff->size_of_opt_hdr); +} + +pe_api +struct pe_sec_hdr * pe_get_image_named_section_addr (const void * base, const char * name) +{ + uint16_t count; + struct pe_sec_hdr * hdr; + struct pe_coff_file_hdr*coff; + char * ch; + uint32_t len; + uint32_t pos; + uint64_t sname = 0; + + if (!(hdr = pe_get_image_section_tbl_addr(base))) + return 0; + + coff = pe_get_image_coff_hdr_addr(base); + count = *(uint16_t *)coff->num_of_sections; + + if ((len = pe_impl_strlen_ansi(name)) > 8) { + /* todo: long name support */ + return 0; + } else { + for (pos=0, ch=(char *)&sname; posname == sname) + return hdr; + } + + return 0; +} -- cgit v1.2.3