From 432e144beeccf1d9a2d9ed9e7d016384eed0bb32 Mon Sep 17 00:00:00 2001 From: Xusheng Date: Wed, 4 Mar 2026 17:04:53 +0800 Subject: Parse and display PE resource information in triage view. Fix https://github.com/Vector35/binaryninja-api/issues/4052, fix https://github.com/Vector35/binaryninja-api/issues/5607 --- examples/triage/headers.cpp | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) (limited to 'examples/triage/headers.cpp') diff --git a/examples/triage/headers.cpp b/examples/triage/headers.cpp index f2165de0..8aff9f59 100644 --- a/examples/triage/headers.cpp +++ b/examples/triage/headers.cpp @@ -306,8 +306,19 @@ PEHeaders::PEHeaders(BinaryViewRef data) AddField("Compiler(s) Used", compilersUsed); } + auto versionInfo = data->QueryMetadata("PEVersionInfo"); + if (versionInfo && versionInfo->IsKeyValueStore()) + { + for (const auto& [key, value] : versionInfo->GetKeyValueStore()) + { + if (value->IsString() && !value->GetString().empty()) + AddField(QString::fromStdString(key), QString::fromStdString(value->GetString())); + } + } + SetColumns(3); - SetRowsPerColumn(9); + size_t numFields = GetFields().size(); + SetRowsPerColumn((numFields + 2) / 3); } -- cgit v1.3.1