admin/idapython-src
1
0
Fork 0
mirror of https://github.com/idapython/src synced 2026-06-08 14:47:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

IDAPython for IDA 8.4

Browse Source
This commit is contained in:
Arnaud Diederen
2024-02-21 14:22:30 +01:00
parent 6142005952
commit ae62cd4df5
75 changed files with 167600 additions and 505202 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/core/create_structure_programmatically.py
+93 -33
View File
@@ -15,53 +15,113 @@ author: Gergely Erdelyi (gergely.erdelyi@d-dome.net)
# with members of different types.
#---------------------------------------------------------------------
import ida_struct
import ida_idaapi
import ida_bytes
import ida_nalt
import ida_typeinf
import idc
sid = ida_struct.get_struc_id("mystr1")
if sid != -1:
idc.del_struc(sid)
sid = ida_struct.add_struc(ida_idaapi.BADADDR, "mystr1", 0)
print("%x" % sid)
tif = ida_typeinf.tinfo_t()
if tif.get_named_type(None, "mystr1"):
ida_typeinf.del_named_type(None, "mystr1", ida_typeinf.NTF_TYPE)
ida_typeinf.idc_parse_types('struct mystr1 { };', 0)
if not tif.get_named_type(None, "mystr1"):
print("Error retrieving mystr1")
print("%x" % tif.get_ordinal())
# Test simple data types
simple_types_data = [
(ida_bytes.FF_BYTE, 1),
(ida_bytes.FF_WORD, 2),
(ida_bytes.FF_DWORD, 4),
(ida_bytes.FF_QWORD, 8),
(ida_bytes.FF_TBYTE, 10),
(ida_bytes.FF_OWORD, 16),
(ida_bytes.FF_FLOAT, 4),
(ida_bytes.FF_DOUBLE, 8),
(ida_bytes.FF_PACKREAL, 10),
(ida_typeinf.BTF_BYTE, 1),
(ida_typeinf.BTF_INT16, 2),
(ida_typeinf.BTF_UINT32, 4),
(ida_typeinf.BTF_INT64, 8),
(ida_typeinf.BTF_INT128, 16),
(ida_typeinf.BTF_FLOAT, 4),
(ida_typeinf.BTF_DOUBLE, 8),
(ida_typeinf.BTF_TBYTE, 10),
]
udm = ida_typeinf.udm_t()
for i, tpl in enumerate(simple_types_data):
t, nsize = tpl
print("t%x:"% ((t|ida_bytes.FF_DATA) & 0xFFFFFFFF),
idc.add_struc_member(sid, "t%02d"%i, ida_idaapi.BADADDR, (t|ida_bytes.FF_DATA )&0xFFFFFFFF, -1, nsize))
udm.name = "t%02d" % i
udm.size = nsize * 8
udm.type = ida_typeinf.tinfo_t(t)
udm.offset = tif.get_unpadded_size() * 8
print("t%x:"% t,
ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
repr = ida_typeinf.value_repr_t()
repr.set_vtype(ida_typeinf.FRB_NUMO)
print("Set member representation to octal:",
ida_typeinf.tinfo_errstr(tif.set_udm_repr(3, repr)) )
# Test ASCII type
print("ASCII:", idc.add_struc_member(sid, "tascii", -1, ida_bytes.FF_STRLIT|ida_bytes.FF_DATA, ida_nalt.STRTYPE_C, 8))
udm = ida_typeinf.udm_t()
udm.name = "tascii"
udm.size = 8 * 8
udm.type.parse('char tascii[8] __strlit(C,"windows-1252");') # no other way?
udm.offset = tif.get_size() * 8
print("%s:"% udm.name,
ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
# Test struc member type
msid = ida_struct.get_struc_id("mystr2")
if msid != -1:
idc.del_struc(msid)
msid = idc.add_struc(-1, "mystr2", 0)
print(idc.add_struc_member(msid, "member1", -1, (ida_bytes.FF_DWORD|ida_bytes.FF_DATA )&0xFFFFFFFF, -1, 4))
print(idc.add_struc_member(msid, "member2", -1, (ida_bytes.FF_DWORD|ida_bytes.FF_DATA )&0xFFFFFFFF, -1, 4))
# Test struct member type by preparing the whole structure at once
mtif = ida_typeinf.tinfo_t()
if mtif.get_named_type(None, "mystr2"):
ida_typeinf.del_named_type(None, "mystr2", ida_typeinf.NTF_TYPE)
msize = ida_struct.get_struc_size(msid)
print("Struct:", idc.add_struc_member(sid, "tstruct", -1, ida_bytes.FF_STRUCT|ida_bytes.FF_DATA, msid, msize))
print("Stroff:", idc.add_struc_member(sid, "tstroff", -1, ida_bytes.stroff_flag()|ida_bytes.FF_DWORD, msid, 4))
mudt = ida_typeinf.udt_type_data_t()
mudt.name="mystr2"
mudm = ida_typeinf.udm_t()
mudm.name="member1"
mudm.type = ida_typeinf.tinfo_t(ida_typeinf.BTF_INT)
mudt.push_back(mudm)
mudm.name="member2"
mudt.push_back(mudm)
mtif.create_udt(mudt)
print("Struct 2:", ida_typeinf.tinfo_errstr(mtif.set_named_type(None, "mystr2")) )
#Test structure member
udm.size = mtif.get_size() * 8
udm.offset = tif.get_unpadded_size() * 8
udm.name = "tstruct"
udm.type = mtif
print("Struct member:", ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
#Test pointer to structure
udm.name = "strptr"
udm.size = 32
udm.offset = tif.get_unpadded_size() * 8
if not mtif.create_ptr(mtif):
print("Error while creating structure pointer")
udm.type = mtif
print("Strptr:", ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
#Test structure offset
udm.name = "tstroff"
udm.size = 32
udm.offset = tif.get_unpadded_size() * 8
udm.type.parse("int tstroff __stroff(mystr2);")
print("Stroff:", ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
# Test offset types
print("Offset:", idc.add_struc_member(sid, "toffset", -1, ida_bytes.off_flag()|ida_bytes.FF_DATA|ida_bytes.FF_DWORD, 0, 4))
print("Offset:", idc.set_member_type(sid, 0, ida_bytes.off_flag()|ida_bytes.FF_DATA|ida_bytes.FF_DWORD, 0, 4))
udm.name = "toffset"
udm.size = 32
udm.offset = tif.get_unpadded_size() * 8
udm.type.parse("void *toffset;")
print("Offset:", ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
# Test C bitfield types
udm.name = "tbitfield"
udm.offset = tif.get_unpadded_size() * 8
btif = ida_typeinf.tinfo_t()
btif.create_bitfield(4, 2, True) # unsigned __int32 : 2
udm.size = 2
udm.type = btif
print("Bitfield:", ida_typeinf.tinfo_errstr(tif.add_udm(udm)) )
# Print the expanded structure
pflags = ida_typeinf.PRTYPE_TYPE|ida_typeinf.PRTYPE_DEF|ida_typeinf.PRTYPE_MULTI
print(tif._print(tif.get_type_name(), pflags))
if mtif.get_named_type(None, "mystr2"):
print(mtif._print(mtif.get_type_name(), pflags))
print("Done")