Todo List

Class ExportDirectory

getNameString

Member read (const std::string &strFilename, unsigned int uiOffset, unsigned int uiSize, const PeHeader &pehHeader)

: Proper use of InputBuffer

Member rebuild (std::vector< byte > &vBuffer, dword dwRva) const

fValid flag

Member write (const std::string &strFilename, unsigned int uiOffset, unsigned int uiRva) const

Check if ofFile.write succeeded.

Class ImportDirectory

Adding functions by ordinal doesn't work yet (rebuild needs to be changed).

Somehow store the rvas of the chunks in the file.

Member getFunctionName (dword dwFilenr, dword dwFuncnr, currdir cdDir) const

Marked line is unsafe (function should be rewritten).

Member read (const std::string &strFilename, unsigned int uiOffset, unsigned int uiSize, const PeHeaderT< bits > &pehHeader)

Check if streams failed.

Member rebuild (std::vector< byte > &vBuffer, dword dwRva, bool fixEntries=true) const

uiSizeoffuncnames is not used.

Class PeHeaderT

getIdReservedRva

Member addSection (const std::string &strName, dword dwSize)

Better code that handles files with 0 sections.

Member calcOffset () const

uiSize isn't used yet. Will be used later on to search for caves.

Member calcRva () const

uiSize isn't used yet. Will be used later on to search for caves.

Member calcSpaceAfterHeader () const

There are PE files with sections beginning at offset 0. They need to be considered.

Member calcStartOfCode () const

Some optimizization is surely possible here.

There are PE files with sections beginning at offset 0. They need to be considered. Returning 0 for these files doesn't really make sense. So far these sections are disregarded.

Member makeValid (dword dwOffset)

32bit and 64bit versions.

Member rvaToOffset (VAR4_8 dwRva) const

It's not always 0x1000.

Member size () const

Better handling of files with less than 0x10 directories.

Class ResourceElement

write

---