summaryrefslogtreecommitdiffhomepage
path: root/src/hdrdump/pe_hdrdump_export_hdr.c
blob: 4f966403d4619035895a951062685add265f5cc1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
/***************************************************************/
/*  perk: PE Resource Kit                                      */
/*  Copyright (C) 2015--2017  Z. Gilboa                        */
/*  Released under GPLv2 and GPLv3; see COPYING.PERK.          */
/***************************************************************/

#include <stdio.h>

#include <perk/perk.h>
#include <perk/perk_output.h>
#include "perk_driver_impl.h"
#include "perk_hdrdump_impl.h"
#include "perk_dprintf_impl.h"
#include "perk_errinfo_impl.h"

#define PE_ADDR       meta->r_edata
#define PE_RAW_STRUCT export_hdr
#define PE_OUTPUT(x)  PE_OUTPUT_TABLE(x)

int pe_hdrdump_export_hdr(
	const struct pe_driver_ctx *	dctx,
	const struct pe_image_meta *	meta)
{
	int		bits;
	uint64_t	faddr;
	uint64_t	vaddr;
	char *		ch;
	char		buf[8192];

	if (!PE_ADDR)
		return 0;

	if ((bits = pe_image_bits(meta)) < 0)
		return PERK_CUSTOM_ERROR(
			dctx,PERK_ERR_UNSUPPORTED_ABI);

	faddr = (char *)(PE_ADDR) - (char *)meta->r_image.map_addr;
	vaddr = meta->m_opt.oh_mem.coh_image_base + meta->m_edata.eh_virtual_addr;

	ch  = buf;
	ch += pe_output_hex_header(
		ch,
		"struct pe_raw_export_hdr",
		faddr,vaddr,bits);

	ch += PE_OUTPUT(eh_export_flags);
	ch += PE_OUTPUT(eh_time_date_stamp);
	ch += PE_OUTPUT(eh_major_ver);
	ch += PE_OUTPUT(eh_minor_ver);
	ch += PE_OUTPUT(eh_name_rva);
	ch += PE_OUTPUT(eh_ordinal_base);
	ch += PE_OUTPUT(eh_addr_tbl_entries);
	ch += PE_OUTPUT(eh_num_of_name_ptrs);
	ch += PE_OUTPUT(eh_export_addr_tbl_rva);
	ch += PE_OUTPUT(eh_name_ptr_rva);
	ch += PE_OUTPUT(eh_ordinal_tbl_rva);

	ch += pe_output_hex_footer(ch);

	*ch = 0;

	if (pe_dprintf(pe_driver_fdout(dctx),"%s",buf) < 0)
		return PERK_FILE_ERROR(dctx);

	return 0;
}