From 9e2275f12aea1d90c206ea597f42cdd82f9a38ae Mon Sep 17 00:00:00 2001 From: midipix Date: Fri, 30 May 2025 22:16:01 +0000 Subject: library api: _hexdump_ (header and section pretty printing) namespace overhaul. --- src/hexdump/pe_hexdump_export_hdr.c | 68 +++++++++++++++++++++++++++++++++++++ 1 file changed, 68 insertions(+) create mode 100644 src/hexdump/pe_hexdump_export_hdr.c (limited to 'src/hexdump/pe_hexdump_export_hdr.c') diff --git a/src/hexdump/pe_hexdump_export_hdr.c b/src/hexdump/pe_hexdump_export_hdr.c new file mode 100644 index 0000000..d1e3a33 --- /dev/null +++ b/src/hexdump/pe_hexdump_export_hdr.c @@ -0,0 +1,68 @@ +/***************************************************************/ +/* perk: PE Resource Kit */ +/* Copyright (C) 2015--2021 SysDeer Technologies, LLC */ +/* Released under GPLv2 and GPLv3; see COPYING.PERK. */ +/***************************************************************/ + +#include + +#include +#include +#include +#include +#include "perk_driver_impl.h" +#include "perk_hexdump_impl.h" +#include "perk_dprintf_impl.h" +#include "perk_errinfo_impl.h" + +#define PE_ADDR meta->r_edata +#define PE_RAW_STRUCT export_hdr +#define PE_OUTPUT(x) PE_OUTPUT_TABLE(x) + +int pe_hexdump_export_hdr( + const struct pe_driver_ctx * dctx, + const struct pe_image_meta * meta) +{ + int bits; + uint64_t faddr; + uint64_t vaddr; + char * ch; + char buf[8192]; + + if (!PE_ADDR) + return 0; + + if ((bits = pe_image_bits(meta)) < 0) + return PERK_CUSTOM_ERROR( + dctx,PERK_ERR_UNSUPPORTED_ABI); + + faddr = (char *)(PE_ADDR) - (char *)meta->r_image.map_addr; + vaddr = meta->m_opt.oh_mem.coh_image_base + meta->m_edata.eh_virtual_addr; + + ch = buf; + ch += pe_output_hex_header( + ch, + "struct pe_raw_export_hdr", + faddr,vaddr,bits); + + ch += PE_OUTPUT(eh_export_flags); + ch += PE_OUTPUT(eh_time_date_stamp); + ch += PE_OUTPUT(eh_major_ver); + ch += PE_OUTPUT(eh_minor_ver); + ch += PE_OUTPUT(eh_name_rva); + ch += PE_OUTPUT(eh_ordinal_base); + ch += PE_OUTPUT(eh_addr_tbl_entries); + ch += PE_OUTPUT(eh_num_of_name_ptrs); + ch += PE_OUTPUT(eh_export_addr_tbl_rva); + ch += PE_OUTPUT(eh_name_ptr_rva); + ch += PE_OUTPUT(eh_ordinal_tbl_rva); + + ch += pe_output_hex_footer(ch); + + *ch = 0; + + if (pe_dprintf(pe_driver_fdout(dctx),"%s",buf) < 0) + return PERK_FILE_ERROR(dctx); + + return 0; +} -- cgit v1.2.3