PECore.h

Go to the documentation of this file.

#pragma once
 
#include "../Executable.h"
#include "pe_formats.h"
 
//class for internal use of PEFile
class PECore
{
public:
 
    PECore()
        : buf(NULL), dos(NULL), fHdr(NULL), opt32(NULL), opt64(NULL) {}
 
    virtual ~PECore()
    {
        reset();
    }
 
    bool wrap(AbstractByteBuffer *v_buf);
 
    virtual offset_t getRawSize() const { return static_cast<offset_t>(buf->getContentSize()); }
 
    virtual bufsize_t getAlignment(Executable::addr_type aType) const;
    virtual offset_t getImageBase(bool recalculate = false);
    virtual bufsize_t getImageSize();
 
    Executable::exe_bits getHdrBitMode() const;
    Executable::exe_arch getHdrArch() const;
    offset_t peSignatureOffset() const;
    offset_t peFileHdrOffset() const;
    offset_t secHdrsOffset() const;
    offset_t peOptHdrOffset() const;
    bufsize_t peNtHeadersSize() const;
    bufsize_t hdrsSize() const;
 
    void setImageSize(bufsize_t newSize)
    {
        if (opt32) {
            this->opt32->SizeOfImage = newSize;
        }
        else if (opt64) {
            this->opt64->SizeOfImage = newSize;
        }
    }
 
    IMAGE_FILE_HEADER *getFileHeader() const
    {
        return fHdr;
    }
 
protected:
    void reset();
    AbstractByteBuffer *buf;
 
    IMAGE_DOS_HEADER *dos;
    IMAGE_FILE_HEADER* fHdr;
    IMAGE_OPTIONAL_HEADER32* opt32;
    IMAGE_OPTIONAL_HEADER64* opt64;
 
friend class PEFile;
};