From 6aec968c10e0d0c4509cf7d6930e3715175fae67 Mon Sep 17 00:00:00 2001 From: midipix Date: Mon, 14 Nov 2016 22:45:44 -0500 Subject: info api: pe_get_image_subtype(): initial implementation. --- src/logic/pe_get_image_subtype.c | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 src/logic/pe_get_image_subtype.c (limited to 'src') diff --git a/src/logic/pe_get_image_subtype.c b/src/logic/pe_get_image_subtype.c new file mode 100644 index 0000000..7e19ef1 --- /dev/null +++ b/src/logic/pe_get_image_subtype.c @@ -0,0 +1,35 @@ +/***************************************************************/ +/* perk: PE Resource Kit */ +/* Copyright (C) 2015--2016 Z. Gilboa */ +/* Released under GPLv2 and GPLv3; see COPYING.PERK. */ +/***************************************************************/ + +#include + +#include +#include + +/* todo: object, unrecognized */ + +static const char const * pe_subtype_str[PE_SUBTYPE_CAP] = { + [PE_SUBTYPE_UNRECOGNIZED] = "UNRECOGNIZED", + [PE_SUBTYPE_DLL] = "dll", + [PE_SUBTYPE_EXE] = "exe", + [PE_SUBTYPE_OBJ] = "obj", +}; + +int pe_get_image_subtype(const struct pe_image_meta * m, struct pe_info_string * infostr) +{ + int subtype; + + if (m->coff.characteristics & PE_IMAGE_FILE_DLL) + subtype = PE_SUBTYPE_DLL; + + else + subtype = PE_SUBTYPE_EXE; + + if (infostr) + strcpy(infostr->buffer,pe_subtype_str[subtype]); + + return subtype; +} -- cgit v1.2.3