hasherezade-bearparser/parser/pe/rsrc/ResourceContentWrapper.cpp

#include "ResourceContentWrapper.h"

using namespace pe;

QString ResourceContentWrapper::translateType(pe::resource_type type)
{
    switch (type) {
        case RT_CURSOR : return "Cursor";
        case RT_FONT : return "Font";
        case RT_BITMAP : return "Bitmap";
        case RT_ICON : return "Icon";
        case RT_MENU : return "Menu";
        case RT_DIALOG : return "Dialog";
        case RT_STRING : return "Strings";
        case RT_FONTDIR : return "Font Dir.";
        case RT_ACCELERATOR : return "Accelerator";
        case RT_RCDATA : return "RC Data";
        case RT_MESSAGETABLE : return "Message Table";

        case RT_GROUP_CURSOR : return "Cursors Group";
        case RT_GROUP_ICON : return "Icons Group";
        case RT_VERSION : return "Version";
        case RT_DLGINCLUDE : return "Dialog Include";
        case RT_PLUGPLAY : return "Plug-n-Play";
        case RT_VXD : return "VXD";
        case RT_ANICURSOR : return "Animated Cursor";
        case RT_ANIICON : return "Animated Icon";
        case RT_HTML : return "HTML";
        case RT_MANIFEST : return "Manifest";
    }
    return "UNKN";
}

//-------------------------------------------------------

void* ResourceContentWrapper::getResContentPtr()
{
    if (myLeaf == NULL) return NULL;

    pe::IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr();
    if (entry == NULL) return NULL;

    offset_t dataRva = static_cast<offset_t>(entry->OffsetToData);
    bufsize_t dataSize = static_cast<bufsize_t>(entry->Size);

    Executable* m_Exe = myLeaf->getExe();
    Executable::addr_type aT = m_Exe->detectAddrType(dataRva, Executable::RVA);
    offset_t dataOffset = m_Exe->toRaw(dataRva, aT);
    if (dataOffset == INVALID_ADDR) return NULL;

    BYTE* b = m_Exe->getContentAt(dataRva, aT, dataSize);
    return b;
}

bufsize_t ResourceContentWrapper::getResContentSize()
{
    if (myLeaf == NULL) {
        printf("[ERR] MyLeaf is NULL\n");
        return 0;
    }
    pe::IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr();
    if (entry == NULL) {
        printf("[ERR] Leaf ERR\n");
        return 0;
    }
    DWORD size = entry->Size;
    return size;
}

offset_t ResourceContentWrapper::getContentRaw()
{
    if (myLeaf == NULL) return 0;

    pe::IMAGE_RESOURCE_DATA_ENTRY* entry = this->myLeaf->leafEntryPtr();
    if (entry == NULL) return 0;

    uint64_t dataRva = entry->OffsetToData;
    Executable* m_Exe = myLeaf->getExe();
    Executable::addr_type aT = m_Exe->detectAddrType(dataRva, Executable::RVA);
    return m_Exe->toRaw(dataRva, aT);
}

BYTE* ResourceContentWrapper::getContentAt(offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
{
    if (myLeaf == NULL) return NULL;

    Executable* m_Exe = myLeaf->getExe();
    BYTE* b = m_Exe->getContentAt(dataAddr, aT, dataSize);
    return b;
}