1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
|
from PySide2.QtWidgets import QTreeView
from PySide2.QtCore import Qt, QAbstractItemModel, QModelIndex, QSize
from binaryninja.enums import SymbolType
import binaryninjaui
from binaryninjaui import ViewFrame
class GenericImportsModel(QAbstractItemModel):
def __init__(self, data):
super(GenericImportsModel, self).__init__()
self.entries = []
self.has_modules = False
self.name_col = 1
self.module_col = None
self.ordinal_col = None
self.total_cols = 2
for sym in data.get_symbols_of_type(SymbolType.ImportAddressSymbol):
self.entries.append(sym)
if str(sym.namespace) != "BNINTERNALNAMESPACE":
self.has_modules = True
if self.has_modules:
self.name_col = 3
self.module_col = 1
self.ordinal_col = 2
self.total_cols = 4
def columnCount(self, parent):
return self.total_cols
def rowCount(self, parent):
if parent.isValid():
return 0
return len(self.entries)
def data(self, index, role):
if role != Qt.DisplayRole:
return None
if index.row() >= len(self.entries):
return None
if index.column() == 0:
return "0x%x" % self.entries[index.row()].address
if index.column() == self.name_col:
name = self.entries[index.row()].full_name
if name.endswith("@GOT"):
name = name[:-len("@GOT")]
elif name.endswith("@PLT"):
name = name[:-len("@PLT")]
elif name.endswith("@IAT"):
name = name[:-len("@IAT")]
return name
if index.column() == self.module_col:
return self.getNamespace(self.entries[index.row()])
if index.column() == self.ordinal_col:
return str(self.entries[index.row()].ordinal)
return None
def headerData(self, section, orientation, role):
if orientation == Qt.Vertical:
return None
if role != Qt.DisplayRole:
return None
if section == 0:
return "Entry"
if section == self.name_col:
return "Name"
if section == self.module_col:
return "Module"
if section == self.ordinal_col:
return "Ordinal"
return None
def index(self, row, col, parent):
if parent.isValid():
return QModelIndex()
if row >= len(self.entries):
return QModelIndex()
if col >= self.total_cols:
return QModelIndex()
return self.createIndex(row, col)
def parent(self, index):
return QModelIndex()
def getSymbol(self, index):
if index.row() >= len(self.entries):
return None
return self.entries[index.row()]
def getNamespace(self, sym):
name = str(sym.namespace)
if name == "BNINTERNALNAMESPACE":
return ""
return name
def sort(self, col, order):
self.beginResetModel()
if col == 0:
self.entries.sort(key = lambda sym: sym.address, reverse = order != Qt.AscendingOrder)
elif col == self.name_col:
self.entries.sort(key = lambda sym: sym.full_name, reverse = order != Qt.AscendingOrder)
elif col == self.module_col:
self.entries.sort(key = lambda sym: self.getNamespace(sym), reverse = order != Qt.AscendingOrder)
elif col == self.ordinal_col:
self.entries.sort(key = lambda sym: sym.ordinal, reverse = order != Qt.AscendingOrder)
self.endResetModel()
class ImportsWidget(QTreeView):
def __init__(self, parent, view, data):
super(ImportsWidget, self).__init__(parent)
self.data = data
self.view = view
self.model = GenericImportsModel(self.data)
self.setModel(self.model)
self.setRootIsDecorated(False)
self.setUniformRowHeights(True)
self.setSortingEnabled(True)
self.sortByColumn(0, Qt.AscendingOrder)
if self.model.ordinal_col is not None:
self.setColumnWidth(self.model.ordinal_col, 55)
self.setMinimumSize(QSize(100, 196))
self.setFont(binaryninjaui.getMonospaceFont(self))
self.selectionModel().currentChanged.connect(self.importSelected)
self.doubleClicked.connect(self.importDoubleClicked)
def importSelected(self, cur, prev):
sym = self.model.getSymbol(cur)
if sym is not None:
self.view.setCurrentOffset(sym.address)
def importDoubleClicked(self, cur):
sym = self.model.getSymbol(cur)
if sym is not None:
viewFrame = ViewFrame.viewFrameForWidget(self)
viewFrame.navigate("Linear:" + viewFrame.getCurrentDataType(), sym.address)
|