pe.c File Reference

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <rz_types.h>
#include <rz_util.h>
#include <rz_hash.h>
#include "pe.h"
#include <time.h>

Go to the source code of this file.

Functions
PE_DWord PE_()	bin_pe_rva_to_paddr (RzBinPEObj *bin, PE_DWord rva)
PE_DWord PE_()	bin_pe_rva_to_va (RzBinPEObj *bin, PE_DWord rva)
PE_DWord PE_()	bin_pe_va_to_rva (RzBinPEObj *bin, PE_DWord va)
static int	bin_pe_init (RzBinPEObj *bin)
void *PE_()	rz_bin_pe_free (RzBinPEObj *bin)
RzBinPEObj *PE_()	rz_bin_pe_new_buf (RzBuffer *buf, bool verbose)

Function Documentation

bin_pe_init()

static int bin_pe_init ( RzBinPEObj *  bin )

static

Definition at line 40 of file pe.c.

                                        {
    bin->dos_header = NULL;
    bin->nt_headers = NULL;
    bin->section_header = NULL;
    bin->export_directory = NULL;
    bin->import_directory = NULL;
    bin->resource_directory = NULL;
    bin->security_directory = NULL;
    bin->delay_import_directory = NULL;
    bin->optional_header = NULL;
    bin->data_directory = NULL;
    bin->big_endian = 0;
    bin->cms = NULL;
    bin->spcinfo = NULL;
    if (!PE_(bin_pe_init_hdr)(bin)) {
        RZ_LOG_ERROR("File is not PE\n");
        return false;
    }
    if (!PE_(bin_pe_init_sections)(bin)) {
        RZ_LOG_ERROR("Cannot initialize sections\n");
        return false;
    }
    bin->sections = PE_(rz_bin_pe_get_sections)(bin);
    PE_(bin_pe_init_imports)
    (bin);
    PE_(bin_pe_init_exports)
    (bin);
    PE_(bin_pe_init_resource)
    (bin);
    PE_(bin_pe_init_security)
    (bin);
 
    bin->big_endian = PE_(rz_bin_pe_is_big_endian)(bin);
 
    PE_(bin_pe_init_rich_info)
    (bin);
    PE_(bin_pe_init_tls)
    (bin);
    PE_(bin_pe_init_clr)
    (bin);
    PE_(bin_pe_init_overlay)
    (bin);
    PE_(bin_pe_parse_resource)
    (bin);
    bin->relocs = NULL;
    return true;
}

References bin_pe_init_clr(), bin_pe_init_exports(), bin_pe_init_hdr(), bin_pe_init_imports(), bin_pe_init_overlay(), bin_pe_init_resource(), bin_pe_init_rich_info(), bin_pe_init_sections(), bin_pe_init_security(), bin_pe_init_tls(), bin_pe_parse_resource(), NULL, PE_, rz_bin_pe_get_sections(), rz_bin_pe_is_big_endian(), and RZ_LOG_ERROR.

Referenced by rz_bin_pe_new_buf().

bin_pe_rva_to_paddr()

PE_DWord PE_() bin_pe_rva_to_paddr	(	RzBinPEObj *	bin,
		PE_DWord	rva
	)

Definition at line 15 of file pe.c.

                                                                 {
    PE_DWord section_base;
    int i, section_size;
    for (i = 0; i < bin->num_sections; i++) {
        section_base = bin->sections[i].vaddr;
        section_size = bin->sections[i].vsize;
        if (rva >= section_base && rva < section_base + section_size) {
            return bin->sections[i].paddr + (rva - section_base);
        }
    }
    return rva;
}

References i, PE_DWord, and rva().

Referenced by _parse_resource_directory(), bin_pe_get_overlay(), bin_pe_init_clr(), bin_pe_init_exports(), bin_pe_init_imports(), bin_pe_init_resource(), bin_pe_init_tls(), bin_pe_parse_imports(), bin_pe_store_tls_callbacks(), rz_bin_pe_get_clr_methoddef_offset(), rz_bin_pe_get_clr_symbols(), rz_bin_pe_get_debug_data(), rz_bin_pe_get_entrypoint(), rz_bin_pe_get_exports(), rz_bin_pe_get_imports(), and rz_bin_pe_get_libs().

bin_pe_rva_to_va()

PE_DWord PE_() bin_pe_rva_to_va	(	RzBinPEObj *	bin,
		PE_DWord	rva
	)

Definition at line 28 of file pe.c.

                                                              {
    return PE_(rz_bin_pe_get_image_base)(bin) + rva;
}

References PE_, rva(), and rz_bin_pe_get_image_base().

Referenced by _store_resource_sdb(), bin_pe_parse_imports(), parse_symbol_table(), rz_bin_pe_get_clr_methoddef_offset(), rz_bin_pe_get_clr_symbols(), rz_bin_pe_get_entrypoint(), and rz_bin_pe_get_exports().

bin_pe_va_to_rva()

PE_DWord PE_() bin_pe_va_to_rva	(	RzBinPEObj *	bin,
		PE_DWord	va
	)

Definition at line 32 of file pe.c.

                                                             {
    ut64 imageBase = PE_(rz_bin_pe_get_image_base)(bin);
    if (va < imageBase) {
        return va;
    }
    return va - imageBase;
}

References PE_, rz_bin_pe_get_image_base(), and ut64().

Referenced by bin_pe_init_tls(), and bin_pe_store_tls_callbacks().

rz_bin_pe_free()

void* PE_() rz_bin_pe_free

(

RzBinPEObj *

bin

)

Definition at line 88 of file pe.c.

                                           {
    if (!bin) {
        return NULL;
    }
    free(bin->dos_header);
    free(bin->nt_headers);
    free(bin->section_header);
    free(bin->export_directory);
    free(bin->import_directory);
    free(bin->resource_directory);
    PE_(free_security_directory)
    (bin->security_directory);
    free(bin->delay_import_directory);
    bin_pe_dotnet_destroy_clr(bin->clr);
    free(bin->tls_directory);
    free(bin->sections);
    free(bin->authentihash);
    rz_list_free(bin->rich_entries);
    rz_list_free(bin->resources);
    rz_pkcs7_free_cms(bin->cms);
    rz_pkcs7_free_spcinfo(bin->spcinfo);
    rz_hash_free(bin->hash);
    rz_buf_free(bin->b);
    bin->b = NULL;
    free(bin);
    return NULL;
}

References bin_pe_dotnet_destroy_clr(), free(), free_security_directory(), NULL, PE_, rz_buf_free(), rz_hash_free(), rz_list_free(), rz_pkcs7_free_cms(), and rz_pkcs7_free_spcinfo().

Referenced by rz_bin_pe_new_buf(), rz_bin_pemixed_free(), rz_bin_pemixed_from_bytes_new(), and rz_bin_pemixed_init_dos().

rz_bin_pe_new_buf()

RzBinPEObj* PE_() rz_bin_pe_new_buf	(	RzBuffer *	buf,
		bool	verbose
	)

Definition at line 116 of file pe.c.

                                                                {
    RzBinPEObj *bin = RZ_NEW0(RzBinPEObj);
    if (!bin) {
        return NULL;
    }
    bin->kv = sdb_new0();
    bin->b = rz_buf_ref(buf);
    bin->verbose = verbose;
    bin->size = rz_buf_size(buf);
    bin->hash = rz_hash_new();
    if (!bin_pe_init(bin)) {
        return PE_(rz_bin_pe_free)(bin);
    }
    return bin;
}

References bin_pe_init(), NULL, PE_, rz_bin_pe_free(), rz_buf_ref(), rz_buf_size(), rz_hash_new(), RZ_NEW0, RzBinPEObj, sdb_new0(), and verbose.

Referenced by rz_bin_pemixed_from_bytes_new().