cimportripper.h

pe exe packer (must use vc2005 to compile)

// Author:   Brandon LaCombe
// Date:     February 3, 2006
// License:  Public Domain
#ifndef _CIMPORTRIPPER_H
#define _CIMPORTRIPPER_H

#include <windows.h>

// private type definitions needed for header compilation
typedef struct _IMPORTED_DLL IMPORTED_DLL, *PIMPORTED_DLL;

class CImportRipper
{
public:

    CImportRipper();
    ~CImportRipper();

    // interface functions
    DWORD CalculateDescriptorRva(DWORD dwBaseRva);
    VOID Rip(PVOID pvFile);
    DWORD GetSize();
    VOID Export(PVOID pvOutput, DWORD dwBaseRva);


private:

    // private functions
    PIMPORTED_DLL CreateImportedDll();
    VOID          DeleteImportedDlls();
    VOID          ExtractImports();
    DWORD         FindShortestFunctionName(PDWORD pdwINT);
    BOOL          IsDllUnique(PSTR pDllName);
    BOOL          LoadFile(PBYTE pbFile);
    VOID          StripBoundImportsFromFile();
    VOID          WriteKernelData(PBYTE * ppbHeaders, PBYTE * ppbStrings, DWORD dwBaseRva);

    // member variables
    DWORD         m_dwHeaderSize;
    DWORD         m_dwStringSize;
    HANDLE        m_hHeap;
    PBYTE         m_pbFile;
    PBYTE         m_pbImports;
    PIMPORTED_DLL m_pImportedDlls;
};

#endif