Function peParseBuffer

emmy_hook/src/libpe/libpe.cpp:255–316

#pragma region Internals

PE_STATUS peParseBuffer( PE *pe )
{
#define PE_SAFE_CAST( WHAT, TYPE, POS ) \
	if( POS < pe->dwFileSize && pe->dwFileSize - POS >= sizeof(TYPE) ) \
	{ \
		WHAT = (P##TYPE)(pe->pData + (POS)); \
	} \
	else \
	{ \
		return PE_UNEXPECTED_EOF; \
	} \

	PE_SAFE_CAST( pe->Headers.DOS, IMAGE_DOS_HEADER, 0 );
	if( pe->Headers.DOS->e_magic != IMAGE_DOS_SIGNATURE )
	{
		return PE_NOT_PE;
	}

	PE_SAFE_CAST( pe->Headers.NT, IMAGE_NT_HEADERS, (ULONG)pe->Headers.DOS->e_lfanew );
	if( pe->Headers.NT->Signature != IMAGE_NT_SIGNATURE )
	{
		return PE_NOT_PE;
	}

	if( pe->Headers.NT->OptionalHeader.Magic == IMAGE_NT_OPTIONAL_HDR32_MAGIC )
	{
		pe->Headers.Plus    = FALSE;
		pe->Headers.OPT.p32 = &((PIMAGE_NT_HEADERS32)pe->Headers.NT)->OptionalHeader;
		pe->qwBaseAddress   = pe->Headers.OPT.p32->ImageBase;
		pe->dwImageSize     = pe->Headers.OPT.p32->SizeOfImage;

		pe->Sections.pHeaders = PE_IMAGE_FIRST_SECTION32( pe->Headers.NT );
	}
	else if( pe->Headers.NT->OptionalHeader.Magic == IMAGE_NT_OPTIONAL_HDR64_MAGIC )
	{
		pe->Headers.Plus    = TRUE;
		pe->Headers.OPT.p64 = &((PIMAGE_NT_HEADERS64)pe->Headers.NT)->OptionalHeader;
		pe->qwBaseAddress   = pe->Headers.OPT.p64->ImageBase;
		pe->dwImageSize     = pe->Headers.OPT.p64->SizeOfImage;

		pe->Sections.pHeaders = PE_IMAGE_FIRST_SECTION64( pe->Headers.NT );
	}
	else
	{
		return PE_NOT_PE;
	}

	pe->Sections.dwNumber = pe->Headers.NT->FileHeader.NumberOfSections;

	PE_SET_PARSED( pe, SECTIONS );

	PE_ADDRESS_FROM_VA
	(
		pe,
		pe->EntryPoint,
		pe->qwBaseAddress + PE_HEADERS_OPT_FIELD( pe, AddressOfEntryPoint )
	);