1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
{
This file is part of the Free Pascal run time library.
Copyright (c) 2008 by Giulio Bernardi
Resource reader for PE image files
See the file COPYING.FPC, included in this distribution,
for details about the copyright.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
**********************************************************************}
unit winpeimagereader;
{$MODE OBJFPC} {$H+}
interface
uses
Classes, SysUtils, resource, coffreader;
type
{ TWinPEImageResourceReader }
TWinPEImageResourceReader = class (TAbstractResourceReader)
private
fDescription: string;
fExtensions: string;
fCoffReader : TCoffResourceReader;
protected
function CheckDosStub(aStream : TStream) : boolean;
function CheckPESignature(aStream : TStream) : boolean;
function GetExtensions : string; override;
function GetDescription : string; override;
procedure Load(aResources : TResources; aStream : TStream); override;
function CheckMagic(aStream : TStream) : boolean; override;
public
constructor Create; override;
destructor Destroy; override;
end;
implementation
const
PESignatureOffset = $3C;
{ TWinPEImageResourceReader }
function TWinPEImageResourceReader.CheckDosStub(aStream: TStream): boolean;
var w : word;
lw : longword;
begin
Result:=false;
try
aStream.ReadBuffer(w,2);
except
on e : EReadError do exit;
end;
{$IFDEF ENDIAN_BIG}
w:=SwapEndian(w);
{$ENDIF}
Result:=w=$5A4D; //MZ
if not Result then exit;
aStream.Position:=PESignatureOffset;
aStream.ReadBuffer(lw,4);
{$IFDEF ENDIAN_BIG}
lw:=SwapEndian(lw);
{$ENDIF}
aStream.Position:=lw;
end;
function TWinPEImageResourceReader.CheckPESignature(aStream: TStream): boolean;
var lw : longword;
begin
aStream.ReadBuffer(lw,4);
{$IFDEF ENDIAN_BIG}
lw:=SwapEndian(lw);
{$ENDIF}
Result:=lw=$00004550; //PE#0#0
end;
function TWinPEImageResourceReader.GetExtensions: string;
begin
Result:=fExtensions;
end;
function TWinPEImageResourceReader.GetDescription: string;
begin
Result:=fDescription;
end;
procedure TWinPEImageResourceReader.Load(aResources: TResources; aStream: TStream);
begin
if not CheckMagic(aStream) then
raise EResourceReaderWrongFormatException.Create('');
CallSubReaderLoad(fCoffReader,aResources,aStream);
end;
function TWinPEImageResourceReader.CheckMagic(aStream: TStream): boolean;
begin
Result:=CheckDosStub(aStream) and CheckPESignature(aStream);
end;
constructor TWinPEImageResourceReader.Create;
begin
fExtensions:='.exe .dll .bpl';
fDescription:='Win32 PE image resource reader';
fCoffReader:=TCoffResourceReader.Create;
end;
destructor TWinPEImageResourceReader.Destroy;
begin
fCoffReader.Free;
end;
initialization
TResources.RegisterReader('.exe',TWinPEImageResourceReader);
TResources.RegisterReader('.dll',TWinPEImageResourceReader);
TResources.RegisterReader('.bpl',TWinPEImageResourceReader);
end.
|
