📄 pedump.pas
字号:
unit PeDump;
{$I JCL.INC}
interface
uses
Windows, Messages, SysUtils, Classes, Graphics, Controls, Forms, Dialogs,
JclPeImage, ComCtrls, ExtCtrls, Menus;
type
TPeDumpViewCategory = (vcHeader, vcDirectory, vcSection, vcLoadConfig,
vcImport, vcExport, vcResource, vcRelocation, vcDebug);
TPeDumpChild = class(TForm)
SectionTreeView: TTreeView;
Splitter1: TSplitter;
PageControl1: TPageControl;
ItemsTab: TTabSheet;
DirectoryTab: TTabSheet;
ItemsListView: TListView;
DirectoryListView: TListView;
ImportTab: TTabSheet;
ImportListView: TListView;
ExportTab: TTabSheet;
ExportListView: TListView;
PopupMenu1: TPopupMenu;
Copytoclipboard1: TMenuItem;
Selectall1: TMenuItem;
N1: TMenuItem;
Openlibrary1: TMenuItem;
FindinWin32APIhelp1: TMenuItem;
ResourceTab: TTabSheet;
ResourceListView: TListView;
SectionTab: TTabSheet;
SectionListView: TListView;
ResourceDirTab: TTabSheet;
ResourceDirListView: TListView;
ExportStatusBar: TStatusBar;
ImportStatusBar: TStatusBar;
RelocTab: TTabSheet;
RelocListView: TListView;
RelocStatusBar: TStatusBar;
DebugTab: TTabSheet;
DebugListView: TListView;
procedure FormCreate(Sender: TObject);
procedure FormClose(Sender: TObject; var Action: TCloseAction);
procedure ItemsListViewData(Sender: TObject; Item: TListItem);
procedure SectionTreeViewChange(Sender: TObject; Node: TTreeNode);
procedure DirectoryListViewData(Sender: TObject; Item: TListItem);
procedure ImportListViewColumnClick(Sender: TObject;
Column: TListColumn);
procedure ImportListViewData(Sender: TObject; Item: TListItem);
procedure FormDestroy(Sender: TObject);
procedure ExportListViewData(Sender: TObject; Item: TListItem);
procedure ExportListViewColumnClick(Sender: TObject;
Column: TListColumn);
procedure SectionTreeViewDblClick(Sender: TObject);
procedure SectionListViewData(Sender: TObject; Item: TListItem);
procedure ResourceListViewData(Sender: TObject; Item: TListItem);
procedure ResourceDirListViewData(Sender: TObject; Item: TListItem);
procedure ImportListViewDblClick(Sender: TObject);
procedure DirectoryListViewCustomDrawItem(Sender: TCustomListView;
Item: TListItem; State: TCustomDrawState; var DefaultDraw: Boolean);
procedure SectionTreeViewExpanding(Sender: TObject; Node: TTreeNode;
var AllowExpansion: Boolean);
procedure RelocListViewData(Sender: TObject; Item: TListItem);
procedure DebugListViewData(Sender: TObject; Item: TListItem);
procedure ItemsListViewInfoTip(Sender: TObject; Item: TListItem;
var InfoTip: String);
private
FCurrentResourceDirectory: TJclPeResourceItem;
FCurrentImportIndex: Integer;
FCurrentRelocationIndex: Integer;
FOriginalPageControlWndProc: TWndMethod;
FPeImage: TJclPeImage;
FGroupImports: Boolean;
FUpdatingView: Boolean;
FUnmangleNames: Boolean;
function GetFileName: TFileName;
function GetHasDirectory(const Directory: DWORD): Boolean;
function GetNodeCategory(Node: TTreeNode): TPeDumpViewCategory;
procedure ExportListViewSort;
procedure ImportListViewSort;
function IsListViewActiveAndFocused(ListView: TListView): Boolean;
procedure PageControlWndProc(var Message: TMessage);
procedure UpdateView;
procedure UpdateImportView(Node: TTreeNode);
procedure UpdateRelocationView(Node: TTreeNode);
procedure UpdateResourceDir;
procedure UpdateResourceView(Directory: TJclPeResourceItem);
class procedure UpdateSortData(Column: TListColumn);
procedure SetGroupImports(const Value: Boolean);
procedure SetUnmangleNames(const Value: Boolean);
function FunctionName(const Name: string): string;
function HeadersRemark(HeaderItem: TJclPeHeader): string;
public
constructor CreateEx(AOwner: TComponent; APeImage: TJclPeImage);
function ActiveLibName: string;
function ActiveWin32Function: string;
property FileName: TFileName read GetFileName;
property HasDirectory[const Directory: DWORD]: Boolean read GetHasDirectory;
property GroupImports: Boolean read FGroupImports write SetGroupImports;
property PeImage: TJclPeImage read FPeImage;
property UnmangleNames: Boolean read FUnmangleNames write SetUnmangleNames;
end;
var
PeDumpChild: TPeDumpChild;
implementation
{$R *.DFM}
uses
CommCtrl, PeViewerMain, ToolsUtils, PeResource, JclStrings, JclWin32;
resourcestring
RsHeader = 'Header';
RsDirectory = 'Directory';
RsSection = 'Sections';
RsLoadConfig = 'Load config';
RsImport = 'Imports';
RsExport = 'Exports';
RsRelocation = 'Relocations';
RsResource = 'Resources';
RsDebug = 'Debug';
RsNumberOfNames = 'Names: %d';
RsNumberOfFunctions = 'Functions: %d';
RsLinkerProducer = 'Linker: %s';
RsOrdinalBase = 'Ordinal base: %d';
RsAddresses = 'Addresses: %d';
function GetCategoryName(Category: TPeDumpViewCategory): string;
begin
case Category of
vcHeader: Result := RsHeader;
vcDirectory: Result := RsDirectory;
vcSection: Result := RsSection;
vcLoadConfig: Result := RsLoadConfig;
vcImport: Result := RsImport;
vcExport: Result := RsExport;
vcResource: Result := RsResource;
vcRelocation: Result := RsRelocation;
vcDebug: Result := RsDebug;
end;
end;
function ImageIndexFromImportKind(Kind: TJclPeImportKind): Integer;
begin
case Kind of
ikImport:
Result := icoImports;
ikDelayImport:
Result := icoDelayImport;
ikBoundImport:
Result := icoBoundImport;
else
Result := 0;
end;
end;
{ TPeDumpChild }
function TPeDumpChild.ActiveLibName: string;
begin
with SectionTreeView do
if (Selected <> nil) and (Selected.Level = 1) and
(TPeDumpViewCategory(Selected.Parent.Data) = vcImport) then
Result := FPeImage.ExpandBySearchPath(Selected.Text, ExtractFilePath(FileName))
else
Result := '';
end;
function TPeDumpChild.ActiveWin32Function: string;
begin
Result := '';
if IsListViewActiveAndFocused(ImportListView) then
Result := ImportListView.ItemFocused.Caption
else
if IsListViewActiveAndFocused(ExportListView) then
Result := ExportListView.ItemFocused.Caption
else
Result := '';
if Pos('@', Result) > 0 then
Result := ''
else
Result := StrRemoveChars(Result, ['[', ']']);
end;
constructor TPeDumpChild.CreateEx(AOwner: TComponent; APeImage: TJclPeImage);
begin
inherited Create(AOwner);
FPeImage := APeImage;
Caption := ExtractFileName(FileName);
{$IFDEF DELPHI5_UP}
ItemsListView.OnInfoTip := ItemsListViewInfoTip;
{$ENDIF DELPHI5_UP}
end;
function TPeDumpChild.GetFileName: TFileName;
begin
if FPeImage = nil then Result := '' else Result := FPeImage.FileName;
end;
function TPeDumpChild.GetHasDirectory(const Directory: DWORD): Boolean;
begin
if FPeImage = nil then
Result := False
else
Result := FPeImage.DirectoryExists[Directory];
end;
procedure TPeDumpChild.PageControlWndProc(var Message: TMessage);
begin
// remove PageControl's border
FOriginalPageControlWndProc(Message);
with Message do
if (Msg = TCM_ADJUSTRECT) and (Message.WParam = 0) then
InflateRect(PRect(LParam)^, 4, 4);
end;
procedure TPeDumpChild.FormCreate(Sender: TObject);
var
I: Integer;
begin
with PageControl1 do
begin
for I := 0 to PageCount - 1 do Pages[I].TabVisible := False;
FOriginalPageControlWndProc := WindowProc;
WindowProc := PageControlWndProc;
ActivePage := ItemsTab;
Realign;
end;
ImportListView.Tag := $100;
UpdateSortData(ImportListView.Columns[0]);
ExportListView.Tag := $100;
UpdateSortData(ExportListView.Columns[0]);
UpdateView;
end;
procedure TPeDumpChild.FormClose(Sender: TObject; var Action: TCloseAction);
var
F: TForm;
begin
Fix_ListViewBeforeClose(Self);
F := MainForm.FindPeResourceView(FPeImage);
if F <> nil then F.Close;
Action := caFree;
end;
procedure TPeDumpChild.UpdateView;
procedure BuildImageTree;
var
Category: TPeDumpViewCategory;
TempNode: TTreeNode;
function AddCategoryNode(ImageIndex: Integer): TTreeNode;
begin
Result := SectionTreeView.Items.AddChildObject(nil, GetCategoryName(Category),
Pointer(Category));
Result.ImageIndex := ImageIndex;
Result.SelectedIndex := ImageIndex;
end;
begin
FPeImage.TryGetNamesForOrdinalImports;
with SectionTreeView do
begin
Items.BeginUpdate;
try
Items.Clear;
for Category := Low(Category) to High(Category) do
case Category of
vcHeader:
AddCategoryNode(icoHeader);
vcDirectory:
AddCategoryNode(icoDirectory);
vcSection:
AddCategoryNode(icoSection);
vcLoadConfig:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG] then
AddCategoryNode(icoLoadConfig);
vcImport:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_IMPORT] then
begin
TempNode := AddCategoryNode(icoImports);
TempNode.HasChildren := True;
end;
vcExport:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_EXPORT] then
AddCategoryNode(icoExports);
vcRelocation:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_BASERELOC] then
begin
TempNode := AddCategoryNode(icoRelocation);
TempNode.HasChildren := True;
end;
vcResource:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_RESOURCE] then
begin
TempNode := AddCategoryNode(icoResources);
TempNode.HasChildren := True;
end;
vcDebug:
if FPeImage.DirectoryExists[IMAGE_DIRECTORY_ENTRY_DEBUG] then
AddCategoryNode(icoDebug);
end;
Selected := Items.GetFirstNode;
finally
Items.EndUpdate;
end;
end;
end;
begin
BuildImageTree;
with DirectoryListView do
begin
Items.Count := IMAGE_NUMBEROF_DIRECTORY_ENTRIES;
ItemFocused := Items[0];
end;
with SectionListView do
begin
Items.Count := FPeImage.ImageSectionCount;
if Items.Count > 0 then ItemFocused := Items[0];
end;
ExportListView.Items.Count := FPeImage.ExportList.Count;
UpdateResourceDir;
with ExportStatusBar, FPeImage.ExportList do
begin
Panels[0].Text := Format(RsNumberOfNames, [Count]);
Panels[1].Text := Format(RsNumberOfFunctions, [FunctionCount]);
Panels[2].Text := Format(RsOrdinalBase, [Base]);
end;
end;
procedure TPeDumpChild.ItemsListViewData(Sender: TObject; Item: TListItem);
begin
with Item, FPeImage do
case TListView(Sender).Tag of
0: begin
Caption := HeaderNames(TJclPeHeader(Index));
SubItems.Add(HeaderValues[TJclPeHeader(Index)]);
end;
1: begin
Caption := LoadConfigNames(TJclLoadConfig(Index));
SubItems.Add(LoadConfigValues[TJclLoadConfig(Index)]);
end;
end;
end;
procedure TPeDumpChild.SectionTreeViewExpanding(Sender: TObject;
Node: TTreeNode; var AllowExpansion: Boolean);
var
I: Integer;
TempNode: TTreeNode;
ResItem: TJclPeResourceItem;
begin
if Node.GetFirstChild = nil then with SectionTreeView do
begin
Items.BeginUpdate;
case GetNodeCategory(Node) of
vcImport:
if GroupImports then
begin
for I := 0 to FPeImage.ImportList.UniqueLibItemCount - 1 do
with Items.AddChild(Node, FPeImage.ImportList.UniqueLibNames[I]) do
begin
Data := Pointer(-1);
ImageIndex := ImageIndexFromImportKind(FPeImage.ImportList.UniqueLibItems[I].ImportKind);
SelectedIndex := ImageIndex;
end;
end else
begin
// FPeImage.ImportList.SortList(ilName);
for I := 0 to FPeImage.ImportList.Count - 1 do
with Items.AddChild(Node, FPeImage.ImportList[I].Name) do
begin
Data := Pointer(FPeImage.ImportList[I].ImportDirectoryIndex);
ImageIndex := ImageIndexFromImportKind(FPeImage.ImportList[I].ImportKind);
SelectedIndex := ImageIndex;
end;
end;
vcResource:
if Node.Level = 0 then
for I := 0 to FPeImage.ResourceList.Count - 1 do
begin
ResItem := FPeImage.ResourceList[I];
TempNode := Items.AddChildObject(Node, ResItem.ResourceTypeStr, ResItem);
TempNode.ImageIndex := icoResources;
TempNode.SelectedIndex := TempNode.ImageIndex;
TempNode.HasChildren := True;
end
else
begin
ResItem := TJclPeResourceItem(Node.Data);
for I := 0 to ResItem.List.Count - 1 do
with Items.AddChildObject(Node, ResItem.List[I].Name, ResItem.List[I]) do
begin
ImageIndex := icoResources;
SelectedIndex := ImageIndex;
end;
end;
vcRelocation:
for I := 0 to FPeImage.RelocationList.Count - 1 do
with Items.AddChildObject(Node,
Format('%.8x', [FPeImage.RelocationList[I].VirtualAddress]), Pointer(I)) do
begin
ImageIndex := icoRelocation;
SelectedIndex := ImageIndex;
end;
end;
Items.EndUpdate;
end;
end;
procedure TPeDumpChild.SectionTreeViewChange(Sender: TObject; Node: TTreeNode);
begin
if FUpdatingView then Exit;
case GetNodeCategory(Node) of
vcHeader:
begin
ItemsListView.Items.Count := Integer(High(TJclPeHeader)) + 1;
ItemsListView.Tag := 0; // Header items
ItemsListView.Invalidate;
PageControl1.ActivePage := ItemsTab;
end;
vcDirectory: PageControl1.ActivePage := DirectoryTab;
vcSection: PageControl1.ActivePage := SectionTab;
vcLoadConfig:
begin
ItemsListView.Items.Count := Integer(High(TJclLoadConfig)) + 1;
ItemsListView.Tag := 1; // Load config items
ItemsListView.Invalidate;
PageControl1.ActivePage := ItemsTab;
end;
vcImport:
begin
if Node.Level = 0 then UpdateImportView(nil) else UpdateImportView(Node);
PageControl1.ActivePage := ImportTab;
end;
vcExport:
PageControl1.ActivePage := ExportTab;
vcRelocation:
begin
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -