diff options
| author | Xusheng <xusheng@vector35.com> | 2021-07-01 12:34:30 +0800 |
|---|---|---|
| committer | Xusheng Li <xushengli@protonmail.com> | 2021-07-05 10:11:47 +0800 |
| commit | 13ff200ba134b8704f37eca99c42b70dab0d17dc (patch) | |
| tree | 876b3db3c53f704b31152aeaede1f2edc9d27b24 /python/examples/kaitai/microsoft_pe.py | |
| parent | 4039a800349dcd587833d3e27d9137e4649818f4 (diff) | |
Remove snippet and kaitai plugin. Note their individual links.
Diffstat (limited to 'python/examples/kaitai/microsoft_pe.py')
| -rw-r--r-- | python/examples/kaitai/microsoft_pe.py | 758 |
1 files changed, 0 insertions, 758 deletions
diff --git a/python/examples/kaitai/microsoft_pe.py b/python/examples/kaitai/microsoft_pe.py deleted file mode 100644 index 325b823a..00000000 --- a/python/examples/kaitai/microsoft_pe.py +++ /dev/null @@ -1,758 +0,0 @@ -# This is a generated file! Please edit source .ksy file and use kaitai-struct-compiler to rebuild - -from pkg_resources import parse_version -from .kaitaistruct import __version__ as ks_version, KaitaiStruct, KaitaiStream, BytesIO -from enum import Enum -import collections - - -if parse_version(ks_version) < parse_version('0.7'): - raise Exception("Incompatible Kaitai Struct Python API: 0.7 or later is required, but you have %s" % (ks_version)) - -class MicrosoftPe(KaitaiStruct): - """ - .. seealso:: - Source - http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx - """ - - class PeFormat(Enum): - rom_image = 263 - pe32 = 267 - pe32_plus = 523 - SEQ_FIELDS = ["mz"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['mz']['start'] = self._io.pos() - self.mz = self._root.MzPlaceholder(self._io, self, self._root) - self.mz._read() - self._debug['mz']['end'] = self._io.pos() - - class CertificateEntry(KaitaiStruct): - """ - .. seealso:: - Source - https://docs.microsoft.com/en-us/windows/desktop/debug/pe-format#the-attribute-certificate-table-image-only - """ - - class CertificateRevision(Enum): - revision_1_0 = 256 - revision_2_0 = 512 - - class CertificateType(Enum): - x509 = 1 - pkcs_signed_data = 2 - reserved_1 = 3 - ts_stack_signed = 4 - SEQ_FIELDS = ["length", "revision", "certificate_type", "certificate_bytes"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['length']['start'] = self._io.pos() - self.length = self._io.read_u4le() - self._debug['length']['end'] = self._io.pos() - self._debug['revision']['start'] = self._io.pos() - self.revision = KaitaiStream.resolve_enum(self._root.CertificateEntry.CertificateRevision, self._io.read_u2le()) - self._debug['revision']['end'] = self._io.pos() - self._debug['certificate_type']['start'] = self._io.pos() - self.certificate_type = KaitaiStream.resolve_enum(self._root.CertificateEntry.CertificateType, self._io.read_u2le()) - self._debug['certificate_type']['end'] = self._io.pos() - self._debug['certificate_bytes']['start'] = self._io.pos() - self.certificate_bytes = self._io.read_bytes((self.length - 8)) - self._debug['certificate_bytes']['end'] = self._io.pos() - - - class OptionalHeaderWindows(KaitaiStruct): - - class SubsystemEnum(Enum): - unknown = 0 - native = 1 - windows_gui = 2 - windows_cui = 3 - posix_cui = 7 - windows_ce_gui = 9 - efi_application = 10 - efi_boot_service_driver = 11 - efi_runtime_driver = 12 - efi_rom = 13 - xbox = 14 - windows_boot_application = 16 - SEQ_FIELDS = ["image_base_32", "image_base_64", "section_alignment", "file_alignment", "major_operating_system_version", "minor_operating_system_version", "major_image_version", "minor_image_version", "major_subsystem_version", "minor_subsystem_version", "win32_version_value", "size_of_image", "size_of_headers", "check_sum", "subsystem", "dll_characteristics", "size_of_stack_reserve_32", "size_of_stack_reserve_64", "size_of_stack_commit_32", "size_of_stack_commit_64", "size_of_heap_reserve_32", "size_of_heap_reserve_64", "size_of_heap_commit_32", "size_of_heap_commit_64", "loader_flags", "number_of_rva_and_sizes"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - if self._parent.std.format == self._root.PeFormat.pe32: - self._debug['image_base_32']['start'] = self._io.pos() - self.image_base_32 = self._io.read_u4le() - self._debug['image_base_32']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32_plus: - self._debug['image_base_64']['start'] = self._io.pos() - self.image_base_64 = self._io.read_u8le() - self._debug['image_base_64']['end'] = self._io.pos() - - self._debug['section_alignment']['start'] = self._io.pos() - self.section_alignment = self._io.read_u4le() - self._debug['section_alignment']['end'] = self._io.pos() - self._debug['file_alignment']['start'] = self._io.pos() - self.file_alignment = self._io.read_u4le() - self._debug['file_alignment']['end'] = self._io.pos() - self._debug['major_operating_system_version']['start'] = self._io.pos() - self.major_operating_system_version = self._io.read_u2le() - self._debug['major_operating_system_version']['end'] = self._io.pos() - self._debug['minor_operating_system_version']['start'] = self._io.pos() - self.minor_operating_system_version = self._io.read_u2le() - self._debug['minor_operating_system_version']['end'] = self._io.pos() - self._debug['major_image_version']['start'] = self._io.pos() - self.major_image_version = self._io.read_u2le() - self._debug['major_image_version']['end'] = self._io.pos() - self._debug['minor_image_version']['start'] = self._io.pos() - self.minor_image_version = self._io.read_u2le() - self._debug['minor_image_version']['end'] = self._io.pos() - self._debug['major_subsystem_version']['start'] = self._io.pos() - self.major_subsystem_version = self._io.read_u2le() - self._debug['major_subsystem_version']['end'] = self._io.pos() - self._debug['minor_subsystem_version']['start'] = self._io.pos() - self.minor_subsystem_version = self._io.read_u2le() - self._debug['minor_subsystem_version']['end'] = self._io.pos() - self._debug['win32_version_value']['start'] = self._io.pos() - self.win32_version_value = self._io.read_u4le() - self._debug['win32_version_value']['end'] = self._io.pos() - self._debug['size_of_image']['start'] = self._io.pos() - self.size_of_image = self._io.read_u4le() - self._debug['size_of_image']['end'] = self._io.pos() - self._debug['size_of_headers']['start'] = self._io.pos() - self.size_of_headers = self._io.read_u4le() - self._debug['size_of_headers']['end'] = self._io.pos() - self._debug['check_sum']['start'] = self._io.pos() - self.check_sum = self._io.read_u4le() - self._debug['check_sum']['end'] = self._io.pos() - self._debug['subsystem']['start'] = self._io.pos() - self.subsystem = KaitaiStream.resolve_enum(self._root.OptionalHeaderWindows.SubsystemEnum, self._io.read_u2le()) - self._debug['subsystem']['end'] = self._io.pos() - self._debug['dll_characteristics']['start'] = self._io.pos() - self.dll_characteristics = self._io.read_u2le() - self._debug['dll_characteristics']['end'] = self._io.pos() - if self._parent.std.format == self._root.PeFormat.pe32: - self._debug['size_of_stack_reserve_32']['start'] = self._io.pos() - self.size_of_stack_reserve_32 = self._io.read_u4le() - self._debug['size_of_stack_reserve_32']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32_plus: - self._debug['size_of_stack_reserve_64']['start'] = self._io.pos() - self.size_of_stack_reserve_64 = self._io.read_u8le() - self._debug['size_of_stack_reserve_64']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32: - self._debug['size_of_stack_commit_32']['start'] = self._io.pos() - self.size_of_stack_commit_32 = self._io.read_u4le() - self._debug['size_of_stack_commit_32']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32_plus: - self._debug['size_of_stack_commit_64']['start'] = self._io.pos() - self.size_of_stack_commit_64 = self._io.read_u8le() - self._debug['size_of_stack_commit_64']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32: - self._debug['size_of_heap_reserve_32']['start'] = self._io.pos() - self.size_of_heap_reserve_32 = self._io.read_u4le() - self._debug['size_of_heap_reserve_32']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32_plus: - self._debug['size_of_heap_reserve_64']['start'] = self._io.pos() - self.size_of_heap_reserve_64 = self._io.read_u8le() - self._debug['size_of_heap_reserve_64']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32: - self._debug['size_of_heap_commit_32']['start'] = self._io.pos() - self.size_of_heap_commit_32 = self._io.read_u4le() - self._debug['size_of_heap_commit_32']['end'] = self._io.pos() - - if self._parent.std.format == self._root.PeFormat.pe32_plus: - self._debug['size_of_heap_commit_64']['start'] = self._io.pos() - self.size_of_heap_commit_64 = self._io.read_u8le() - self._debug['size_of_heap_commit_64']['end'] = self._io.pos() - - self._debug['loader_flags']['start'] = self._io.pos() - self.loader_flags = self._io.read_u4le() - self._debug['loader_flags']['end'] = self._io.pos() - self._debug['number_of_rva_and_sizes']['start'] = self._io.pos() - self.number_of_rva_and_sizes = self._io.read_u4le() - self._debug['number_of_rva_and_sizes']['end'] = self._io.pos() - - - class OptionalHeaderDataDirs(KaitaiStruct): - SEQ_FIELDS = ["export_table", "import_table", "resource_table", "exception_table", "certificate_table", "base_relocation_table", "debug", "architecture", "global_ptr", "tls_table", "load_config_table", "bound_import", "iat", "delay_import_descriptor", "clr_runtime_header"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['export_table']['start'] = self._io.pos() - self.export_table = self._root.DataDir(self._io, self, self._root) - self.export_table._read() - self._debug['export_table']['end'] = self._io.pos() - self._debug['import_table']['start'] = self._io.pos() - self.import_table = self._root.DataDir(self._io, self, self._root) - self.import_table._read() - self._debug['import_table']['end'] = self._io.pos() - self._debug['resource_table']['start'] = self._io.pos() - self.resource_table = self._root.DataDir(self._io, self, self._root) - self.resource_table._read() - self._debug['resource_table']['end'] = self._io.pos() - self._debug['exception_table']['start'] = self._io.pos() - self.exception_table = self._root.DataDir(self._io, self, self._root) - self.exception_table._read() - self._debug['exception_table']['end'] = self._io.pos() - self._debug['certificate_table']['start'] = self._io.pos() - self.certificate_table = self._root.DataDir(self._io, self, self._root) - self.certificate_table._read() - self._debug['certificate_table']['end'] = self._io.pos() - self._debug['base_relocation_table']['start'] = self._io.pos() - self.base_relocation_table = self._root.DataDir(self._io, self, self._root) - self.base_relocation_table._read() - self._debug['base_relocation_table']['end'] = self._io.pos() - self._debug['debug']['start'] = self._io.pos() - self.debug = self._root.DataDir(self._io, self, self._root) - self.debug._read() - self._debug['debug']['end'] = self._io.pos() - self._debug['architecture']['start'] = self._io.pos() - self.architecture = self._root.DataDir(self._io, self, self._root) - self.architecture._read() - self._debug['architecture']['end'] = self._io.pos() - self._debug['global_ptr']['start'] = self._io.pos() - self.global_ptr = self._root.DataDir(self._io, self, self._root) - self.global_ptr._read() - self._debug['global_ptr']['end'] = self._io.pos() - self._debug['tls_table']['start'] = self._io.pos() - self.tls_table = self._root.DataDir(self._io, self, self._root) - self.tls_table._read() - self._debug['tls_table']['end'] = self._io.pos() - self._debug['load_config_table']['start'] = self._io.pos() - self.load_config_table = self._root.DataDir(self._io, self, self._root) - self.load_config_table._read() - self._debug['load_config_table']['end'] = self._io.pos() - self._debug['bound_import']['start'] = self._io.pos() - self.bound_import = self._root.DataDir(self._io, self, self._root) - self.bound_import._read() - self._debug['bound_import']['end'] = self._io.pos() - self._debug['iat']['start'] = self._io.pos() - self.iat = self._root.DataDir(self._io, self, self._root) - self.iat._read() - self._debug['iat']['end'] = self._io.pos() - self._debug['delay_import_descriptor']['start'] = self._io.pos() - self.delay_import_descriptor = self._root.DataDir(self._io, self, self._root) - self.delay_import_descriptor._read() - self._debug['delay_import_descriptor']['end'] = self._io.pos() - self._debug['clr_runtime_header']['start'] = self._io.pos() - self.clr_runtime_header = self._root.DataDir(self._io, self, self._root) - self.clr_runtime_header._read() - self._debug['clr_runtime_header']['end'] = self._io.pos() - - - class DataDir(KaitaiStruct): - SEQ_FIELDS = ["virtual_address", "size"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['virtual_address']['start'] = self._io.pos() - self.virtual_address = self._io.read_u4le() - self._debug['virtual_address']['end'] = self._io.pos() - self._debug['size']['start'] = self._io.pos() - self.size = self._io.read_u4le() - self._debug['size']['end'] = self._io.pos() - - - class CoffSymbol(KaitaiStruct): - SEQ_FIELDS = ["name_annoying", "value", "section_number", "type", "storage_class", "number_of_aux_symbols"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['name_annoying']['start'] = self._io.pos() - self._raw_name_annoying = self._io.read_bytes(8) - io = KaitaiStream(BytesIO(self._raw_name_annoying)) - self.name_annoying = self._root.Annoyingstring(io, self, self._root) - self.name_annoying._read() - self._debug['name_annoying']['end'] = self._io.pos() - self._debug['value']['start'] = self._io.pos() - self.value = self._io.read_u4le() - self._debug['value']['end'] = self._io.pos() - self._debug['section_number']['start'] = self._io.pos() - self.section_number = self._io.read_u2le() - self._debug['section_number']['end'] = self._io.pos() - self._debug['type']['start'] = self._io.pos() - self.type = self._io.read_u2le() - self._debug['type']['end'] = self._io.pos() - self._debug['storage_class']['start'] = self._io.pos() - self.storage_class = self._io.read_u1() - self._debug['storage_class']['end'] = self._io.pos() - self._debug['number_of_aux_symbols']['start'] = self._io.pos() - self.number_of_aux_symbols = self._io.read_u1() - self._debug['number_of_aux_symbols']['end'] = self._io.pos() - - @property - def section(self): - if hasattr(self, '_m_section'): - return self._m_section if hasattr(self, '_m_section') else None - - self._m_section = self._root.pe.sections[(self.section_number - 1)] - return self._m_section if hasattr(self, '_m_section') else None - - @property - def data(self): - if hasattr(self, '_m_data'): - return self._m_data if hasattr(self, '_m_data') else None - - _pos = self._io.pos() - self._io.seek((self.section.pointer_to_raw_data + self.value)) - self._debug['_m_data']['start'] = self._io.pos() - self._m_data = self._io.read_bytes(1) - self._debug['_m_data']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_data if hasattr(self, '_m_data') else None - - - class PeHeader(KaitaiStruct): - SEQ_FIELDS = ["pe_signature", "coff_hdr", "optional_hdr", "sections"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['pe_signature']['start'] = self._io.pos() - self.pe_signature = self._io.ensure_fixed_contents(b"\x50\x45\x00\x00") - self._debug['pe_signature']['end'] = self._io.pos() - self._debug['coff_hdr']['start'] = self._io.pos() - self.coff_hdr = self._root.CoffHeader(self._io, self, self._root) - self.coff_hdr._read() - self._debug['coff_hdr']['end'] = self._io.pos() - self._debug['optional_hdr']['start'] = self._io.pos() - self._raw_optional_hdr = self._io.read_bytes(self.coff_hdr.size_of_optional_header) - io = KaitaiStream(BytesIO(self._raw_optional_hdr)) - self.optional_hdr = self._root.OptionalHeader(io, self, self._root) - self.optional_hdr._read() - self._debug['optional_hdr']['end'] = self._io.pos() - self._debug['sections']['start'] = self._io.pos() - self.sections = [None] * (self.coff_hdr.number_of_sections) - for i in range(self.coff_hdr.number_of_sections): - if not 'arr' in self._debug['sections']: - self._debug['sections']['arr'] = [] - self._debug['sections']['arr'].append({'start': self._io.pos()}) - _t_sections = self._root.Section(self._io, self, self._root) - _t_sections._read() - self.sections[i] = _t_sections - self._debug['sections']['arr'][i]['end'] = self._io.pos() - - self._debug['sections']['end'] = self._io.pos() - - @property - def certificate_table(self): - if hasattr(self, '_m_certificate_table'): - return self._m_certificate_table if hasattr(self, '_m_certificate_table') else None - - if self.optional_hdr.data_dirs.certificate_table.virtual_address != 0: - _pos = self._io.pos() - self._io.seek(self.optional_hdr.data_dirs.certificate_table.virtual_address) - self._debug['_m_certificate_table']['start'] = self._io.pos() - self._raw__m_certificate_table = self._io.read_bytes(self.optional_hdr.data_dirs.certificate_table.size) - io = KaitaiStream(BytesIO(self._raw__m_certificate_table)) - self._m_certificate_table = self._root.CertificateTable(io, self, self._root) - self._m_certificate_table._read() - self._debug['_m_certificate_table']['end'] = self._io.pos() - self._io.seek(_pos) - - return self._m_certificate_table if hasattr(self, '_m_certificate_table') else None - - - class OptionalHeader(KaitaiStruct): - SEQ_FIELDS = ["std", "windows", "data_dirs"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['std']['start'] = self._io.pos() - self.std = self._root.OptionalHeaderStd(self._io, self, self._root) - self.std._read() - self._debug['std']['end'] = self._io.pos() - self._debug['windows']['start'] = self._io.pos() - self.windows = self._root.OptionalHeaderWindows(self._io, self, self._root) - self.windows._read() - self._debug['windows']['end'] = self._io.pos() - self._debug['data_dirs']['start'] = self._io.pos() - self.data_dirs = self._root.OptionalHeaderDataDirs(self._io, self, self._root) - self.data_dirs._read() - self._debug['data_dirs']['end'] = self._io.pos() - - - class Section(KaitaiStruct): - SEQ_FIELDS = ["name", "virtual_size", "virtual_address", "size_of_raw_data", "pointer_to_raw_data", "pointer_to_relocations", "pointer_to_linenumbers", "number_of_relocations", "number_of_linenumbers", "characteristics"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['name']['start'] = self._io.pos() - self.name = (KaitaiStream.bytes_strip_right(self._io.read_bytes(8), 0)).decode(u"UTF-8") - self._debug['name']['end'] = self._io.pos() - self._debug['virtual_size']['start'] = self._io.pos() - self.virtual_size = self._io.read_u4le() - self._debug['virtual_size']['end'] = self._io.pos() - self._debug['virtual_address']['start'] = self._io.pos() - self.virtual_address = self._io.read_u4le() - self._debug['virtual_address']['end'] = self._io.pos() - self._debug['size_of_raw_data']['start'] = self._io.pos() - self.size_of_raw_data = self._io.read_u4le() - self._debug['size_of_raw_data']['end'] = self._io.pos() - self._debug['pointer_to_raw_data']['start'] = self._io.pos() - self.pointer_to_raw_data = self._io.read_u4le() - self._debug['pointer_to_raw_data']['end'] = self._io.pos() - self._debug['pointer_to_relocations']['start'] = self._io.pos() - self.pointer_to_relocations = self._io.read_u4le() - self._debug['pointer_to_relocations']['end'] = self._io.pos() - self._debug['pointer_to_linenumbers']['start'] = self._io.pos() - self.pointer_to_linenumbers = self._io.read_u4le() - self._debug['pointer_to_linenumbers']['end'] = self._io.pos() - self._debug['number_of_relocations']['start'] = self._io.pos() - self.number_of_relocations = self._io.read_u2le() - self._debug['number_of_relocations']['end'] = self._io.pos() - self._debug['number_of_linenumbers']['start'] = self._io.pos() - self.number_of_linenumbers = self._io.read_u2le() - self._debug['number_of_linenumbers']['end'] = self._io.pos() - self._debug['characteristics']['start'] = self._io.pos() - self.characteristics = self._io.read_u4le() - self._debug['characteristics']['end'] = self._io.pos() - - @property - def body(self): - if hasattr(self, '_m_body'): - return self._m_body if hasattr(self, '_m_body') else None - - _pos = self._io.pos() - self._io.seek(self.pointer_to_raw_data) - self._debug['_m_body']['start'] = self._io.pos() - self._m_body = self._io.read_bytes(self.size_of_raw_data) - self._debug['_m_body']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_body if hasattr(self, '_m_body') else None - - - class CertificateTable(KaitaiStruct): - SEQ_FIELDS = ["items"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['items']['start'] = self._io.pos() - self.items = [] - i = 0 - while not self._io.is_eof(): - if not 'arr' in self._debug['items']: - self._debug['items']['arr'] = [] - self._debug['items']['arr'].append({'start': self._io.pos()}) - _t_items = self._root.CertificateEntry(self._io, self, self._root) - _t_items._read() - self.items.append(_t_items) - self._debug['items']['arr'][len(self.items) - 1]['end'] = self._io.pos() - i += 1 - - self._debug['items']['end'] = self._io.pos() - - - class MzPlaceholder(KaitaiStruct): - SEQ_FIELDS = ["magic", "data1", "ofs_pe"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['magic']['start'] = self._io.pos() - self.magic = self._io.ensure_fixed_contents(b"\x4D\x5A") - self._debug['magic']['end'] = self._io.pos() - self._debug['data1']['start'] = self._io.pos() - self.data1 = self._io.read_bytes(58) - self._debug['data1']['end'] = self._io.pos() - self._debug['ofs_pe']['start'] = self._io.pos() - self.ofs_pe = self._io.read_u4le() - self._debug['ofs_pe']['end'] = self._io.pos() - - - class OptionalHeaderStd(KaitaiStruct): - SEQ_FIELDS = ["format", "major_linker_version", "minor_linker_version", "size_of_code", "size_of_initialized_data", "size_of_uninitialized_data", "address_of_entry_point", "base_of_code", "base_of_data"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['format']['start'] = self._io.pos() - self.format = KaitaiStream.resolve_enum(self._root.PeFormat, self._io.read_u2le()) - self._debug['format']['end'] = self._io.pos() - self._debug['major_linker_version']['start'] = self._io.pos() - self.major_linker_version = self._io.read_u1() - self._debug['major_linker_version']['end'] = self._io.pos() - self._debug['minor_linker_version']['start'] = self._io.pos() - self.minor_linker_version = self._io.read_u1() - self._debug['minor_linker_version']['end'] = self._io.pos() - self._debug['size_of_code']['start'] = self._io.pos() - self.size_of_code = self._io.read_u4le() - self._debug['size_of_code']['end'] = self._io.pos() - self._debug['size_of_initialized_data']['start'] = self._io.pos() - self.size_of_initialized_data = self._io.read_u4le() - self._debug['size_of_initialized_data']['end'] = self._io.pos() - self._debug['size_of_uninitialized_data']['start'] = self._io.pos() - self.size_of_uninitialized_data = self._io.read_u4le() - self._debug['size_of_uninitialized_data']['end'] = self._io.pos() - self._debug['address_of_entry_point']['start'] = self._io.pos() - self.address_of_entry_point = self._io.read_u4le() - self._debug['address_of_entry_point']['end'] = self._io.pos() - self._debug['base_of_code']['start'] = self._io.pos() - self.base_of_code = self._io.read_u4le() - self._debug['base_of_code']['end'] = self._io.pos() - if self.format == self._root.PeFormat.pe32: - self._debug['base_of_data']['start'] = self._io.pos() - self.base_of_data = self._io.read_u4le() - self._debug['base_of_data']['end'] = self._io.pos() - - - - class CoffHeader(KaitaiStruct): - """ - .. seealso:: - 3.3. COFF File Header (Object and Image) - """ - - class MachineType(Enum): - unknown = 0 - i386 = 332 - r4000 = 358 - wcemipsv2 = 361 - alpha = 388 - sh3 = 418 - sh3dsp = 419 - sh4 = 422 - sh5 = 424 - arm = 448 - thumb = 450 - armnt = 452 - am33 = 467 - powerpc = 496 - powerpcfp = 497 - ia64 = 512 - mips16 = 614 - mipsfpu = 870 - mipsfpu16 = 1126 - ebc = 3772 - riscv32 = 20530 - riscv64 = 20580 - riscv128 = 20776 - amd64 = 34404 - m32r = 36929 - arm64 = 43620 - SEQ_FIELDS = ["machine", "number_of_sections", "time_date_stamp", "pointer_to_symbol_table", "number_of_symbols", "size_of_optional_header", "characteristics"] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - self._debug['machine']['start'] = self._io.pos() - self.machine = KaitaiStream.resolve_enum(self._root.CoffHeader.MachineType, self._io.read_u2le()) - self._debug['machine']['end'] = self._io.pos() - self._debug['number_of_sections']['start'] = self._io.pos() - self.number_of_sections = self._io.read_u2le() - self._debug['number_of_sections']['end'] = self._io.pos() - self._debug['time_date_stamp']['start'] = self._io.pos() - self.time_date_stamp = self._io.read_u4le() - self._debug['time_date_stamp']['end'] = self._io.pos() - self._debug['pointer_to_symbol_table']['start'] = self._io.pos() - self.pointer_to_symbol_table = self._io.read_u4le() - self._debug['pointer_to_symbol_table']['end'] = self._io.pos() - self._debug['number_of_symbols']['start'] = self._io.pos() - self.number_of_symbols = self._io.read_u4le() - self._debug['number_of_symbols']['end'] = self._io.pos() - self._debug['size_of_optional_header']['start'] = self._io.pos() - self.size_of_optional_header = self._io.read_u2le() - self._debug['size_of_optional_header']['end'] = self._io.pos() - self._debug['characteristics']['start'] = self._io.pos() - self.characteristics = self._io.read_u2le() - self._debug['characteristics']['end'] = self._io.pos() - - @property - def symbol_table_size(self): - if hasattr(self, '_m_symbol_table_size'): - return self._m_symbol_table_size if hasattr(self, '_m_symbol_table_size') else None - - self._m_symbol_table_size = (self.number_of_symbols * 18) - return self._m_symbol_table_size if hasattr(self, '_m_symbol_table_size') else None - - @property - def symbol_name_table_offset(self): - if hasattr(self, '_m_symbol_name_table_offset'): - return self._m_symbol_name_table_offset if hasattr(self, '_m_symbol_name_table_offset') else None - - self._m_symbol_name_table_offset = (self.pointer_to_symbol_table + self.symbol_table_size) - return self._m_symbol_name_table_offset if hasattr(self, '_m_symbol_name_table_offset') else None - - @property - def symbol_name_table_size(self): - if hasattr(self, '_m_symbol_name_table_size'): - return self._m_symbol_name_table_size if hasattr(self, '_m_symbol_name_table_size') else None - - _pos = self._io.pos() - self._io.seek(self.symbol_name_table_offset) - self._debug['_m_symbol_name_table_size']['start'] = self._io.pos() - self._m_symbol_name_table_size = self._io.read_u4le() - self._debug['_m_symbol_name_table_size']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_symbol_name_table_size if hasattr(self, '_m_symbol_name_table_size') else None - - @property - def symbol_table(self): - if hasattr(self, '_m_symbol_table'): - return self._m_symbol_table if hasattr(self, '_m_symbol_table') else None - - _pos = self._io.pos() - self._io.seek(self.pointer_to_symbol_table) - self._debug['_m_symbol_table']['start'] = self._io.pos() - self._m_symbol_table = [None] * (self.number_of_symbols) - for i in range(self.number_of_symbols): - if not 'arr' in self._debug['_m_symbol_table']: - self._debug['_m_symbol_table']['arr'] = [] - self._debug['_m_symbol_table']['arr'].append({'start': self._io.pos()}) - _t__m_symbol_table = self._root.CoffSymbol(self._io, self, self._root) - _t__m_symbol_table._read() - self._m_symbol_table[i] = _t__m_symbol_table - self._debug['_m_symbol_table']['arr'][i]['end'] = self._io.pos() - - self._debug['_m_symbol_table']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_symbol_table if hasattr(self, '_m_symbol_table') else None - - - class Annoyingstring(KaitaiStruct): - SEQ_FIELDS = [] - def __init__(self, _io, _parent=None, _root=None): - self._io = _io - self._parent = _parent - self._root = _root if _root else self - self._debug = collections.defaultdict(dict) - - def _read(self): - pass - - @property - def name_from_offset(self): - if hasattr(self, '_m_name_from_offset'): - return self._m_name_from_offset if hasattr(self, '_m_name_from_offset') else None - - if self.name_zeroes == 0: - io = self._root._io - _pos = io.pos() - io.seek(((self._parent._parent.symbol_name_table_offset + self.name_offset) if self.name_zeroes == 0 else 0)) - self._debug['_m_name_from_offset']['start'] = io.pos() - self._m_name_from_offset = (io.read_bytes_term(0, False, True, False)).decode(u"ascii") - self._debug['_m_name_from_offset']['end'] = io.pos() - io.seek(_pos) - - return self._m_name_from_offset if hasattr(self, '_m_name_from_offset') else None - - @property - def name_offset(self): - if hasattr(self, '_m_name_offset'): - return self._m_name_offset if hasattr(self, '_m_name_offset') else None - - _pos = self._io.pos() - self._io.seek(4) - self._debug['_m_name_offset']['start'] = self._io.pos() - self._m_name_offset = self._io.read_u4le() - self._debug['_m_name_offset']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_name_offset if hasattr(self, '_m_name_offset') else None - - @property - def name(self): - if hasattr(self, '_m_name'): - return self._m_name if hasattr(self, '_m_name') else None - - self._m_name = (self.name_from_offset if self.name_zeroes == 0 else self.name_from_short) - return self._m_name if hasattr(self, '_m_name') else None - - @property - def name_zeroes(self): - if hasattr(self, '_m_name_zeroes'): - return self._m_name_zeroes if hasattr(self, '_m_name_zeroes') else None - - _pos = self._io.pos() - self._io.seek(0) - self._debug['_m_name_zeroes']['start'] = self._io.pos() - self._m_name_zeroes = self._io.read_u4le() - self._debug['_m_name_zeroes']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_name_zeroes if hasattr(self, '_m_name_zeroes') else None - - @property - def name_from_short(self): - if hasattr(self, '_m_name_from_short'): - return self._m_name_from_short if hasattr(self, '_m_name_from_short') else None - - if self.name_zeroes != 0: - _pos = self._io.pos() - self._io.seek(0) - self._debug['_m_name_from_short']['start'] = self._io.pos() - self._m_name_from_short = (self._io.read_bytes_term(0, False, True, False)).decode(u"ascii") - self._debug['_m_name_from_short']['end'] = self._io.pos() - self._io.seek(_pos) - - return self._m_name_from_short if hasattr(self, '_m_name_from_short') else None - - - @property - def pe(self): - if hasattr(self, '_m_pe'): - return self._m_pe if hasattr(self, '_m_pe') else None - - _pos = self._io.pos() - self._io.seek(self.mz.ofs_pe) - self._debug['_m_pe']['start'] = self._io.pos() - self._m_pe = self._root.PeHeader(self._io, self, self._root) - self._m_pe._read() - self._debug['_m_pe']['end'] = self._io.pos() - self._io.seek(_pos) - return self._m_pe if hasattr(self, '_m_pe') else None - - |
