LIEF: Library to Instrument Executable Formats Version 0.15.0
Loading...
Searching...
No Matches
Import.hpp
1/* Copyright 2017 - 2024 R. Thomas
2 * Copyright 2017 - 2024 Quarkslab
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16#ifndef LIEF_PE_IMPORT_H
17#define LIEF_PE_IMPORT_H
18
19#include <string>
20#include <ostream>
21
22#include "LIEF/errors.hpp"
23#include "LIEF/Object.hpp"
24#include "LIEF/visibility.h"
25#include "LIEF/iterators.hpp"
26#include "LIEF/PE/ImportEntry.hpp"
27
28namespace LIEF {
29namespace PE {
30class Parser;
31class Builder;
32class DataDirectory;
33
34namespace details {
35struct pe_import;
36}
37
39class LIEF_API Import : public Object {
40
41 friend class Parser;
42 friend class Builder;
43
44 public:
45 using entries_t = std::vector<ImportEntry>;
48
49 Import(const details::pe_import& import);
50 Import(std::string name) :
51 name_(std::move(name))
52 {}
53 Import() = default;
54 ~Import() override = default;
55
56 Import(const Import& other) = default;
57 Import(Import&& other) noexcept = default;
58 Import& operator=(Import&& other) noexcept = default;
59 Import& operator=(const Import& other) = default;
60
62 uint32_t forwarder_chain() const {
63 return forwarder_chain_;
64 }
65
68 uint32_t timedatestamp() const {
69 return timedatestamp_;
70 }
71
74 return entries_;
75 }
76
77 it_entries entries() {
78 return entries_;
79 }
80
86 uint32_t import_address_table_rva() const {
87 return import_address_table_RVA_;
88 }
89
94 uint32_t import_lookup_table_rva() const {
95 return import_lookup_table_RVA_;
96 }
97
102 result<uint32_t> get_function_rva_from_iat(const std::string& function) const;
103
105 ImportEntry* get_entry(const std::string& name) {
106 return const_cast<ImportEntry*>(static_cast<const Import*>(this)->get_entry(name));
107 }
108 const ImportEntry* get_entry(const std::string& name) const;
109
111 const std::string& name() const {
112 return name_;
113 }
114
116 void name(std::string name) {
117 name_ = std::move(name);
118 }
119
125 return directory_;
126 }
127 const DataDirectory* directory() const {
128 return directory_;
129 }
130
136 return iat_directory_;
137 }
138 const DataDirectory* iat_directory() const {
139 return iat_directory_;
140 }
141
144
146 ImportEntry& add_entry(const std::string& name);
147
148 void import_lookup_table_rva(uint32_t rva);
149 void import_address_table_rva(uint32_t rva);
150
151 void accept(Visitor& visitor) const override;
152
153 LIEF_API friend std::ostream& operator<<(std::ostream& os, const Import& entry);
154
155 private:
156 entries_t entries_;
157 DataDirectory* directory_ = nullptr;
158 DataDirectory* iat_directory_ = nullptr;
159 uint32_t import_lookup_table_RVA_ = 0;
160 uint32_t timedatestamp_ = 0;
161 uint32_t forwarder_chain_ = 0;
162 uint32_t name_RVA_ = 0;
163 uint32_t import_address_table_RVA_ = 0;
164 std::string name_;
165 PE_TYPE type_ = PE_TYPE::PE32;
166};
167
168}
169}
170
171#endif
Definition Object.hpp:25
Class that is used to rebuild a raw PE binary from a PE::Binary object.
Definition PE/Builder.hpp:45
Class that represents a PE data directory entry.
Definition DataDirectory.hpp:38
Class that represents an entry (i.e. an import) in the import table (Import).
Definition ImportEntry.hpp:36
Class that represents a PE import.
Definition Import.hpp:39
DataDirectory * directory()
Return the PE::DataDirectory associated with this import. It should be the one at index PE::DataDirec...
Definition Import.hpp:124
it_const_entries entries() const
Iterator over the PE::ImportEntry.
Definition Import.hpp:73
ImportEntry & add_entry(const std::string &name)
Add a new import entry with the given name (i.e. an imported function)
uint32_t forwarder_chain() const
The index of the first forwarder reference.
Definition Import.hpp:62
ImportEntry * get_entry(const std::string &name)
Return the imported function with the given name.
Definition Import.hpp:105
uint32_t import_lookup_table_rva() const
Return the relative virtual address of the import lookup table.
Definition Import.hpp:94
uint32_t import_address_table_rva() const
The RVA of the import address table (IAT). The content of this table is identical to the content of t...
Definition Import.hpp:86
uint32_t timedatestamp() const
The stamp that is set to zero until the image is bound. After the image is bound, this field is set t...
Definition Import.hpp:68
result< uint32_t > get_function_rva_from_iat(const std::string &function) const
Return the Function's RVA from the import address table (IAT)
const std::string & name() const
Return the library's name (e.g. kernel32.dll)
Definition Import.hpp:111
DataDirectory * iat_directory()
Return the PE::DataDirectory associated associated with the IAT. It should be the one at index PE::Da...
Definition Import.hpp:135
ImportEntry & add_entry(const ImportEntry &entry)
Add a new import entry (i.e. an imported function)
void name(std::string name)
Change the current import name.
Definition Import.hpp:116
Main interface to parse PE binaries. In particular the static functions: Parser::parse should be used...
Definition PE/Parser.hpp:47
Definition Visitor.hpp:219
Iterator which returns reference on container's values.
Definition iterators.hpp:48
PE_TYPE
Definition PE/enums.hpp:680
LIEF namespace.
Definition Abstract/Binary.hpp:32
tl::expected< T, lief_errors > result
Wrapper that contains an Object (T) or an error.
Definition errors.hpp:72