/* Copyright 2017 - 2021 R. Thomas * Copyright 2017 - 2021 Quarkslab * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef LIEF_PE_BUILDER_H_ #define LIEF_PE_BUILDER_H_ #include #include #include #include #include #include #include #include #include #include "LIEF/visibility.h" #include "LIEF/utils.hpp" #include "LIEF/iostream.hpp" #include "LIEF/PE/Binary.hpp" namespace LIEF { namespace PE { //! @brief Class which reconstruct a PE binary from a PE::Binary object class LIEF_API Builder { public: Builder(void) = delete; Builder(Binary* pe_binary); ~Builder(void); //! @brief Perform the build process void build(void); //! @brief Construct a ``jmp [address] @ from``. //! //! It is used when patching import table template static std::vector build_jmp(uint64_t from, uint64_t address); //! @brief Construct a ``jmp far address @ from``. //! //! It is used for hooking template static std::vector build_jmp_hook(uint64_t from, uint64_t address); //! @brief Rebuild the import table in another section Builder& build_imports(bool flag = true); //! @brief Patch the original import table in order to //! redirect functions to the new import table. //! //! This setting should be used with LIEF::PE::Builder::build_imports set to ``true`` Builder& patch_imports(bool flag = true); //! @brief Rebuild the relocation table in another section Builder& build_relocations(bool flag = true); //! @brief Rebuild TLS object in another section Builder& build_tls(bool flag = true); //! @brief Rebuid the resources in another section Builder& build_resources(bool flag); //! @brief Rebuild the binary's overlay Builder& build_overlay(bool flag); //! @brief Rebuild the DOS stub content Builder& build_dos_stub(bool flag); //! @brief Return the build result const std::vector& get_build(void); //! @brief Write the build result into the ``output`` file void write(const std::string& filename) const; LIEF_API friend std::ostream& operator<<(std::ostream& os, const Builder& b); Builder& operator<<(const DosHeader& dos_header); Builder& operator<<(const Header& bHeader); Builder& operator<<(const OptionalHeader& optional_header); Builder& operator<<(const DataDirectory& data_directory); Builder& operator<<(const Section& section); protected: template void build_optional_header(const OptionalHeader& optional_header); //! @brief Rebuild Import Table // TODO: Bug with x86 template void build_import_table(void); template void build_tls(void); void build_symbols(void); void build_string_table(void); void build_relocation(void); void build_resources(void); void build_overlay(void); void build_dos_stub(void); void compute_resources_size( ResourceNode& node, uint32_t *headerSize, uint32_t *dataSize, uint32_t *nameSize); void construct_resources( ResourceNode& node, std::vector *content, uint32_t *offsetToHeader, uint32_t *offsetToData, uint32_t *offsetToName, uint32_t baseRVA, uint32_t depth); mutable vector_iostream ios_; Binary *binary_; bool build_imports_; bool patch_imports_; bool build_relocations_; bool build_tls_; bool build_resources_; bool build_overlay_; bool build_dos_stub_; }; } } #endif