#include "ResourceContentWrapper.h" using namespace pe; QString ResourceContentWrapper::translateType(pe::resource_type type) { switch (type) { case RESTYPE_CURSOR : return "Cursor"; case RESTYPE_FONT : return "Font"; case RESTYPE_BITMAP : return "Bitmap"; case RESTYPE_ICON : return "Icon"; case RESTYPE_MENU : return "Menu"; case RESTYPE_DIALOG : return "Dialog"; case RESTYPE_STRING : return "Strings"; case RESTYPE_FONTDIR : return "Font Dir."; case RESTYPE_ACCELERATOR : return "Accelerator"; case RESTYPE_RCDATA : return "RC Data"; case RESTYPE_MESSAGETABLE : return "Message Table"; case RESTYPE_GROUP_CURSOR : return "Cursors Group"; case RESTYPE_GROUP_ICON : return "Icons Group"; case RESTYPE_VERSION : return "Version"; case RESTYPE_DLGINCLUDE : return "Dialog Include"; case RESTYPE_PLUGPLAY : return "Plug-n-Play"; case RESTYPE_VXD : return "VXD"; case RESTYPE_ANICURSOR : return "Animated Cursor"; case RESTYPE_ANIICON : return "Animated Icon"; case RESTYPE_HTML : return "HTML"; case RESTYPE_MANIFEST : return "Manifest"; } return "UNKN"; } //------------------------------------------------------- void* ResourceContentWrapper::getResContentPtr() { if (myLeaf == NULL) return NULL; IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr(); if (entry == NULL) return NULL; offset_t dataRva = static_cast(entry->OffsetToData); bufsize_t dataSize = static_cast(entry->Size); Executable* m_Exe = myLeaf->getExe(); Executable::addr_type aT = m_Exe->detectAddrType(dataRva, Executable::RVA); offset_t dataOffset = m_Exe->toRaw(dataRva, aT); if (dataOffset == INVALID_ADDR) return NULL; BYTE* b = m_Exe->getContentAt(dataRva, aT, dataSize); return b; } bufsize_t ResourceContentWrapper::getResContentSize() { if (myLeaf == NULL) { printf("[ERR] MyLeaf is NULL\n"); return 0; } IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr(); if (entry == NULL) { printf("[ERR] Leaf ERR\n"); return 0; } DWORD size = entry->Size; return size; } offset_t ResourceContentWrapper::getContentRaw() { if (myLeaf == NULL) return 0; IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr(); if (entry == NULL) return 0; uint64_t dataRva = entry->OffsetToData; Executable* m_Exe = myLeaf->getExe(); Executable::addr_type aT = m_Exe->detectAddrType(dataRva, Executable::RVA); return m_Exe->toRaw(dataRva, aT); } BYTE* ResourceContentWrapper::getContentAt(offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize) { if (myLeaf == NULL) return NULL; Executable* m_Exe = myLeaf->getExe(); BYTE* b = m_Exe->getContentAt(dataAddr, aT, dataSize); return b; }