From c0fbae7a40c662ae77f59f5f919cd6b88e38a85d Mon Sep 17 00:00:00 2001 From: midipix Date: Sat, 2 May 2015 10:05:51 -0400 Subject: initial commit. --- src/reader/pe_read_import_header.c | 46 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 src/reader/pe_read_import_header.c (limited to 'src/reader/pe_read_import_header.c') diff --git a/src/reader/pe_read_import_header.c b/src/reader/pe_read_import_header.c new file mode 100644 index 0000000..7d71143 --- /dev/null +++ b/src/reader/pe_read_import_header.c @@ -0,0 +1,46 @@ +#include +#include + +#include +#include "perk_impl.h" + +int pe_read_import_header(const struct pe_import_hdr * p, struct pe_meta_import_hdr * m) +{ + #if (BYTE_ORDER == LITTLE_ENDIAN) + + memcpy(m,p,sizeof(*p)); + + #else + + m->import_lookup_tbl_rva = pe_read_long(p->import_lookup_tbl_rva); + m->time_date_stamp = pe_read_long(p->time_date_stamp); + m->forwarder_chain = pe_read_long(p>forwarder_chain); + m->name_rva = pe_read_long(p->name_rva); + m->import_addr_tbl_rva = pe_read_long(p>import_addr_tbl_rva); + + #endif + + m->name = 0; + m->aitems = 0; + + return 0; +}; + +int pe_read_import_lookup_item( + const struct pe_import_lookup_item * p, + struct pe_meta_import_lookup_item * m, + uint32_t magic) +{ + switch (magic) { + case PE_MAGIC_PE32: + m->u.import_lookup_entry_64 = pe_read_long(p->u.import_lookup_entry_32); + return 0; + + case PE_MAGIC_PE32_PLUS: + m->u.import_lookup_entry_64 = pe_read_quad(p->u.import_lookup_entry_64); + return 0; + + default: + return PERK_BAD_IMAGE_TYPE; + } +}; -- cgit v1.2.3