|
/******************************************************************************
*
* PROJECT: ExeScanner
* FILE NAME: PortableExecutable.h
*
* DEVELOPER: Vishalsinh Jhala
* DATE: 2-Apr-2005
*
* DESCRIPTION: Declaration file for class PortableExecutable.
*
* NOTES: Starting point to enter a PE. Reads and verifies DOS/WIN
* headers. Direct Child Objects are ResourceSections. When the
* program will deal will all sections ResourceSection will
* become a generic class PESection. A PESection with ".rsrc"
* will be ResourceSection.
* convert this to a singleton class later on
*
******************************************************************************/
#pragma once
#include "pebase.h"
#include "ResourceSection.h"
class PortableExecutable :
public PEBase
{
ResourceSection *m_pRSRC;
void GetMachine(CString&str);
void GetCharacteristics(CString&str);
void GetSubSystem(CString&str);
void GetDllChars(CString&str);
public:
IMAGE_DOS_HEADER dosHeader;
IMAGE_NT_HEADERS winHeader;
IMAGE_SECTION_HEADER *m_pSectionHeader;
PortableExecutable(PEFile *pFile);
~PortableExecutable(void);
virtual void IterateElements(PETreeList *pList);
virtual void GetPropertyInfo(CString& strInfo);
};
|
By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.
If a file you wish to view isn't highlighted, and is a text file (not binary), please
let us know and we'll add colourisation support for it.
This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.
A list of licenses authors might use can be found here
This member has not yet provided a Biography. Assume it's interesting and varied, and probably something to do with programming.