mirror of
https://github.com/QuasarApp/pe-parse.git
synced 2025-04-27 04:44:31 +00:00
46 lines
1.3 KiB
C++
46 lines
1.3 KiB
C++
/* DO WHATEVER YOU WANT */
|
|
|
|
#ifndef _PARSE_H
|
|
#define _PARSE_H
|
|
#include <string>
|
|
#include <boost/cstdint.hpp>
|
|
|
|
typedef boost::uint32_t RVA;
|
|
|
|
typedef struct _bounded_buffer {
|
|
boost::uint8_t *bufBegin;
|
|
boost::uint32_t bufLen;
|
|
} bounded_buffer;
|
|
|
|
bool readByte(bounded_buffer *b, boost::uint32_t offset, boost::uint8_t &out);
|
|
bool readWord(bounded_buffer *b, boost::uint32_t offset, boost::uint16_t &out);
|
|
bool readDword(bounded_buffer *b, boost::uint32_t offset, boost::uint32_t &out);
|
|
|
|
typedef struct _parsed_pe {
|
|
std::string originalFilePath;
|
|
} parsed_pe;
|
|
|
|
//get a PE parse context from a file
|
|
parsed_pe *ParsePEFromFile(const char *filePath);
|
|
|
|
//destruct a PE context
|
|
void DestructParsedPE(parsed_pe *pe);
|
|
|
|
//iterate over the imports by RVA and string
|
|
typedef void (*iterRVAStr)(void *, RVA, std::string &);
|
|
void IterImpRVAString(parsed_pe *pe, iterRVAStr cb, void *cbd);
|
|
|
|
//iterate over relocations in the PE file
|
|
typedef void (*iterReloc)(void *, RVA);
|
|
void IterRelocs(parsed_pe *pe, iterReloc cb, void *cbd);
|
|
|
|
//iterate over the exports by RVA
|
|
typedef void (*iterRVA)(void *, RVA);
|
|
void IterExpRVA(parsed_pe *pe, iterRVA cb, void *cbd);
|
|
|
|
//iterate over sections
|
|
typedef void (*iterSec)(void *, RVA secBase, std::string &, bounded_buffer *b);
|
|
void IterSec(parsed_pe *pe, iterSec cb, void *cbd);
|
|
|
|
#endif
|