blob: ab4c2183d5a3f73a81577594a45f76c74d9828a7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
#pragma once
#include "binaryninjaapi.h"
#include "peview.h"
#ifdef WIN32
#pragma warning(disable: 4005)
#endif
// EFI_IMAGE_DATA_DIRECTORY
struct TEImageDataDirectory {
uint32_t virtualAddress;
uint32_t size;
};
#define EFI_TE_IMAGE_HEADER_SIZE 40
#define EFI_TE_SECTION_HEADER_SIZE 40
// EFI section header characteristics bit masks
#define EFI_IMAGE_SCN_MEM_EXECUTE 0x20000000
#define EFI_IMAGE_SCN_MEM_READ 0x40000000
#define EFI_IMAGE_SCN_MEM_WRITE 0x80000000
// EFI_TE_IMAGE_HEADER
struct TEImageHeader {
uint16_t magic;
uint16_t machine;
uint8_t numberOfSections;
uint8_t subsystem;
uint16_t strippedSize;
uint32_t addressOfEntrypoint;
uint32_t baseOfCode;
uint64_t imageBase;
struct TEImageDataDirectory dataDirectory[2];
};
// EFI_IMAGE_SECTION_HEADER
struct TEImageSectionHeader {
std::string name; // 8 bytes
uint32_t virtualSize;
uint32_t virtualAddress;
uint32_t sizeOfRawData;
uint32_t pointerToRawData;
uint32_t pointerToRelocations;
uint32_t pointerToLineNumbers;
uint16_t numberOfRelocations;
uint16_t numberOfLineNumbers;
uint32_t characteristics;
};
namespace BinaryNinja
{
class TEView: public BinaryView
{
bool m_parseOnly;
std::vector<TEImageSectionHeader> m_sections;
bool m_relocatable = false;
Ref<Logger> m_logger;
bool m_backedByDatabase;
uint64_t m_imageBase;
uint64_t m_headersOffset;
Ref<Architecture> m_arch;
uint64_t m_entryPoint;
uint32_t m_addressSize = 4;
protected:
virtual uint64_t PerformGetEntryPoint() const override;
virtual bool PerformIsExecutable() const override { return true; }
virtual BNEndianness PerformGetDefaultEndianness() const override { return LittleEndian; }
virtual bool PerformIsRelocatable() const override { return m_relocatable; }
virtual size_t PerformGetAddressSize() const override;
public:
TEView(BinaryView* data, bool parseOnly = false);
virtual bool Init() override;
private:
void ReadTEImageHeader(BinaryReader& reader, struct TEImageHeader& imageHeader);
void ReadTEImageSectionHeaders(BinaryReader& reader, uint32_t numSections);
void CreateSections();
void AssignHeaderTypes();
};
class TEViewType: public BinaryViewType
{
Ref<Logger> m_logger;
public:
TEViewType();
virtual Ref<BinaryView> Create(BinaryView* data) override;
virtual Ref<BinaryView> Parse(BinaryView* data) override;
virtual bool IsTypeValidForData(BinaryView* data) override;
virtual Ref<Settings> GetLoadSettingsForData(BinaryView* data) override;
};
void InitTEViewType();
}
|
