mirror of
https://github.com/cea-sec/miasm
synced 2026-06-21 13:48:18 +00:00
Fabrice Desclaux
3ece6deb69
/!\ May break libimp API Replace loader.utils.libimp import with: * loader.pe.libimp_pe for pe * loader.elf.libimp_elf for elf
88 lines
2.9 KiB
Python
88 lines
2.9 KiB
Python
import logging
|
|
|
|
log = logging.getLogger('loader_common')
|
|
hnd = logging.StreamHandler()
|
|
hnd.setFormatter(logging.Formatter("[%(levelname)s]: %(message)s"))
|
|
log.addHandler(hnd)
|
|
log.setLevel(logging.CRITICAL)
|
|
|
|
|
|
def canon_libname_libfunc(libname, libfunc):
|
|
dn = libname.split('.')[0]
|
|
if type(libfunc) == str:
|
|
return "%s_%s" % (dn, libfunc)
|
|
else:
|
|
return str(dn), libfunc
|
|
|
|
|
|
class libimp:
|
|
|
|
def __init__(self, lib_base_ad=0x71111000, **kargs):
|
|
self.name2off = {}
|
|
self.libbase2lastad = {}
|
|
self.libbase_ad = lib_base_ad
|
|
self.lib_imp2ad = {}
|
|
self.lib_imp2dstad = {}
|
|
self.fad2cname = {}
|
|
self.fad2info = {}
|
|
self.all_exported_lib = []
|
|
|
|
def lib_get_add_base(self, name):
|
|
name = name.lower().strip(' ')
|
|
if not "." in name:
|
|
log.debug('warning adding .dll to modulename')
|
|
name += '.dll'
|
|
log.debug('%s' % name)
|
|
|
|
if name in self.name2off:
|
|
ad = self.name2off[name]
|
|
else:
|
|
ad = self.libbase_ad
|
|
log.debug('new lib %s %s' % (name, hex(ad)))
|
|
self.name2off[name] = ad
|
|
self.libbase2lastad[ad] = ad + 0x1
|
|
self.lib_imp2ad[ad] = {}
|
|
self.lib_imp2dstad[ad] = {}
|
|
self.libbase_ad += 0x1000
|
|
return ad
|
|
|
|
def lib_get_add_func(self, libad, imp_ord_or_name, dst_ad=None):
|
|
if not libad in self.name2off.values():
|
|
raise ValueError('unknown lib base!', hex(libad))
|
|
|
|
# test if not ordinatl
|
|
# if imp_ord_or_name >0x10000:
|
|
# imp_ord_or_name = vm_get_str(imp_ord_or_name, 0x100)
|
|
# imp_ord_or_name = imp_ord_or_name[:imp_ord_or_name.find('\x00')]
|
|
|
|
#/!\ can have multiple dst ad
|
|
if not imp_ord_or_name in self.lib_imp2dstad[libad]:
|
|
self.lib_imp2dstad[libad][imp_ord_or_name] = set()
|
|
self.lib_imp2dstad[libad][imp_ord_or_name].add(dst_ad)
|
|
|
|
if imp_ord_or_name in self.lib_imp2ad[libad]:
|
|
return self.lib_imp2ad[libad][imp_ord_or_name]
|
|
# log.debug('new imp %s %s' % (imp_ord_or_name, dst_ad))
|
|
ad = self.libbase2lastad[libad]
|
|
self.libbase2lastad[libad] += 0x11 # arbitrary
|
|
self.lib_imp2ad[libad][imp_ord_or_name] = ad
|
|
|
|
name_inv = dict([(x[1], x[0]) for x in self.name2off.items()])
|
|
c_name = canon_libname_libfunc(name_inv[libad], imp_ord_or_name)
|
|
self.fad2cname[ad] = c_name
|
|
self.fad2info[ad] = libad, imp_ord_or_name
|
|
return ad
|
|
|
|
def check_dst_ad(self):
|
|
for ad in self.lib_imp2dstad:
|
|
all_ads = self.lib_imp2dstad[ad].values()
|
|
all_ads.sort()
|
|
for i, x in enumerate(all_ads[:-1]):
|
|
if x is None or all_ads[i + 1] is None:
|
|
return False
|
|
if x + 4 != all_ads[i + 1]:
|
|
return False
|
|
return True
|
|
|
|
|