class PEdump
  class VS_VERSIONINFO < IOStruct.new( 'v3a32v',
    :wLength,
    :wValueLength,
    :wType,
    :szKey,          # The Unicode string L"VS_VERSION_INFO".
    :Padding1,
    # manual:
    :Value,          # VS_FIXEDFILEINFO
    :Padding2,
    :Children
  )
    def self.read f, size = SIZE
      super.tap do |vi|
        vi.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000$/,'') rescue nil
        vi.Padding1 = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        vi.Value = VS_FIXEDFILEINFO.read(f,vi.wValueLength)
        # As many zero words as necessary to align the Children member on a 32-bit boundary.
        # These bytes are not included in wValueLength. This member is optional.
        vi.Padding2 = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        vi.Children = [] # An array of zero or one StringFileInfo structures,
                         # and zero or one VarFileInfo structures

        2.times do
          pos = f.tell
          f.seek(pos+6)  # seek 6 bytes forward
          t = f.read(6)
          f.seek(pos)    # return back
          case t
          when "V\x00a\x00r\x00"
            vi.Children << VarFileInfo.read(f)
          when "S\x00t\x00r\x00"
            vi.Children << StringFileInfo.read(f)
          else
            PEdump.logger.warn "[?] invalid VS_VERSIONINFO child type #{t.inspect}"
            break
          end
        end
      end
    end
  end

  class VS_FIXEDFILEINFO < IOStruct.new( 'V13',
    :dwSignature,
    :dwStrucVersion,
    :dwFileVersionMS,
    :dwFileVersionLS,
    :dwProductVersionMS,
    :dwProductVersionLS,
    :dwFileFlagsMask,
    :dwFileFlags,
    :dwFileOS,
    :dwFileType,
    :dwFileSubtype,
    :dwFileDateMS,
    :dwFileDateLS,
    # manual:
    :valid
  )
    def self.read f, size = SIZE
      super.tap do |ffi|
        ffi.valid = (ffi.dwSignature == 0xFEEF04BD)
      end
    end
  end

  class StringFileInfo < IOStruct.new( 'v3a30',
    :wLength,
    :wValueLength,  # always 0
    :wType,         # 1 => text data, 0 => binary data
    :szKey,         # The Unicode string L"StringFileInfo"
    :Padding,       # As many zero words as necessary to align the Children member on a 32-bit boundary
    :Children       # An array of one or more StringTable structures
  )
    def self.read f, size = SIZE
      pos0 = f.tell
      super.tap do |x|
        x.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000$/,'') rescue nil
        x.Padding = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        x.Children = []
        while !f.eof? && f.tell < pos0+x.wLength
          x.Children << StringTable.read(f)
        end
      end
    end
  end

  class StringTable < IOStruct.new( 'v3a16v',
    :wLength,       # The length, in bytes, of this StringTable structure,
                    # including all structures indicated by the Children member.
    :wValueLength,  # always 0
    :wType,         # 1 => text data, 0 => binary data
    :szKey,         # An 8-digit hexadecimal number stored as a Unicode string
    :Padding,       # As many zero words as necessary to align the Children member on a 32-bit boundary
    :Children       # An array of one or more String structures.
  )
    def self.read f, size = SIZE
      pos0 = f.tell
      super.tap do |x|
        x.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000$/,'') rescue nil
        x.Padding = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        x.Children = []
        while !f.eof? && f.tell < pos0+x.wLength
          x.Children << VersionString.read(f)
        end
      end
    end
  end

  class VersionString < IOStruct.new( 'v3',
    :wLength,       # The length, in bytes, of this String structure.
    :wValueLength,  # The size, in words, of the Value member
    :wType,         # 1 => text data, 0 => binary data
    :szKey,         # An arbitrary Unicode string
    :Padding,       # As many zero words as necessary to align the Value member on a 32-bit boundary
    :Value          # A zero-terminated string. See the szKey member description for more information
  )
    def self.read f, size = SIZE
      pos = f.tell
      super.tap do |x|
        x.szKey   = ''
        x.szKey << f.read(2) until x.szKey[-2..-1] == "\x00\x00" || f.eof?
        x.Padding = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil

        value_len = [x.wValueLength*2, x.wLength - (f.tell-pos)].min
        value_len = 0 if value_len < 0

        x.Value   = f.read(value_len)
        if f.tell%4 > 0
          f.read(4-f.tell%4) # undoc padding?
        end
        x.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000+$/,'') rescue nil
        x.Value.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000+$/,'') rescue nil
      end
    end
  end

  class VarFileInfo < IOStruct.new( 'v3a24v',
    :wLength,
    :wValueLength,  # always 0
    :wType,         # 1 => text data, 0 => binary data
    :szKey,         # The Unicode string L"VarFileInfo"
    :Padding,       # As many zero words as necessary to align the Children member on a 32-bit boundary
    :Children       # Typically contains a list of languages that the application or DLL supports
  )
    def self.read f, size = SIZE
      super.tap do |x|
        x.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000$/,'') rescue nil
        x.Padding = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        x.Children = Var.read(f)
      end
    end
  end

  class Var < IOStruct.new( 'v3a24',
    :wLength,
    :wValueLength,  # The length, in bytes, of the Value member
    :wType,         # 1 => text data, 0 => binary data
    :szKey,         # The Unicode string L"Translation"
    :Padding,       # As many zero words as necessary to align the Children member on a 32-bit boundary
    :Value          # An array of one or more values that are language and code page identifier pairs
  )
    def self.read f, size = SIZE
      super.tap do |x|
        x.szKey.force_encoding('UTF-16LE').encode!('UTF-8').sub!(/\u0000$/,'') rescue nil
        x.Padding = f.tell%4 > 0 ? f.read(4 - f.tell%4) : nil
        x.Value = f.read(x.wValueLength).unpack('v*')
      end
    end
  end
end