mirror of
https://codeberg.org/unspeaker/vestal.git
synced 2025-12-06 12:56:41 +01:00
count imports
This commit is contained in:
parent
1997297d7b
commit
5188bc5581
1 changed files with 14 additions and 15 deletions
|
|
@ -81,7 +81,7 @@ impl Dll {
|
||||||
&mut calls_by_target,
|
&mut calls_by_target,
|
||||||
false
|
false
|
||||||
)?;
|
)?;
|
||||||
let imports = Self::imports(&pe);
|
let (modules_count, methods_count) = Self::imports(&pe)?;
|
||||||
let dll = Arc::new(Self {
|
let dll = Arc::new(Self {
|
||||||
name: name.clone(),
|
name: name.clone(),
|
||||||
path: path.clone(),
|
path: path.clone(),
|
||||||
|
|
@ -92,6 +92,8 @@ impl Dll {
|
||||||
calls_by_source,
|
calls_by_source,
|
||||||
calls_by_target,
|
calls_by_target,
|
||||||
});
|
});
|
||||||
|
println!(" (deps-modules {modules_count})");
|
||||||
|
println!(" (deps-methods {methods_count})");
|
||||||
println!(" (call-sites {calls})");
|
println!(" (call-sites {calls})");
|
||||||
for (call, sites) in dll.calls_by_target.iter() {
|
for (call, sites) in dll.calls_by_target.iter() {
|
||||||
println!(" (0x{call:08x}\n {:?})", sites.iter()
|
println!(" (0x{call:08x}\n {:?})", sites.iter()
|
||||||
|
|
@ -103,27 +105,23 @@ impl Dll {
|
||||||
}
|
}
|
||||||
fn imports (pe: &VecPE) -> Usually<(usize, usize)> {
|
fn imports (pe: &VecPE) -> Usually<(usize, usize)> {
|
||||||
let directory = ImportDirectory::parse(pe)?;
|
let directory = ImportDirectory::parse(pe)?;
|
||||||
|
let mut total = 0;
|
||||||
for descriptor in directory.descriptors {
|
for descriptor in directory.descriptors {
|
||||||
let dep = descriptor.get_name(pe)?.as_str()?;
|
let dep = descriptor.get_name(pe)?.as_str()?.to_lowercase();
|
||||||
let imp = descriptor.get_imports(pe)?;
|
let imp = descriptor.get_imports(pe)?;
|
||||||
let iat = descriptor.get_first_thunk(pe)?;
|
let iat = descriptor.get_first_thunk(pe)?;
|
||||||
let ilt = descriptor.get_original_first_thunk(pe)?;
|
let ilt = descriptor.get_original_first_thunk(pe)?;
|
||||||
let lut = descriptor.get_lookup_thunks(pe)?;
|
let lut = descriptor.get_lookup_thunks(pe)?;
|
||||||
let mut imports = Vec::new();
|
let mut imports = Vec::new();
|
||||||
|
let unwrap_thunk = |thunk: &Thunk, name|match thunk {
|
||||||
|
Thunk::Thunk32(t) => panic!("32 bit {name}"),
|
||||||
|
Thunk::Thunk64(t) => t.0
|
||||||
|
};
|
||||||
for (index, (import, thunk, orig, lookup)) in izip!(
|
for (index, (import, thunk, orig, lookup)) in izip!(
|
||||||
imp,
|
imp,
|
||||||
iat.iter().map(|thunk|format!("0x{:08x}", match thunk {
|
iat.iter().map(|thunk|format!("0x{:08x}", unwrap_thunk(thunk, "IAT thunk"))),
|
||||||
Thunk::Thunk32(t) => panic!("32 bit thunk"),
|
ilt.iter().map(|thunk|format!("0x{:08x}", unwrap_thunk(thunk, "ILT (orig) thunk"))),
|
||||||
Thunk::Thunk64(t) => t.0
|
lut.iter().map(|thunk|format!("0x{:08x}", unwrap_thunk(thunk, "lookup thunk"))),
|
||||||
})),
|
|
||||||
ilt.iter().map(|thunk|format!("0x{:08x}", match thunk {
|
|
||||||
Thunk::Thunk32(t) => panic!("32 bit original thunk"),
|
|
||||||
Thunk::Thunk64(t) => t.0
|
|
||||||
})),
|
|
||||||
lut.iter().map(|thunk|format!("0x{:08x}", match thunk {
|
|
||||||
Thunk::Thunk32(t) => panic!("32 bit original thunk"),
|
|
||||||
Thunk::Thunk64(t) => t.0
|
|
||||||
})),
|
|
||||||
).enumerate() {
|
).enumerate() {
|
||||||
let call_via = descriptor.first_thunk.0 + index as u32 * 8;
|
let call_via = descriptor.first_thunk.0 + index as u32 * 8;
|
||||||
let name = match import {
|
let name = match import {
|
||||||
|
|
@ -140,6 +138,7 @@ impl Dll {
|
||||||
};
|
};
|
||||||
println!(" ({index:5} 0x{call_via:08x} {dep:>20} {name}");
|
println!(" ({index:5} 0x{call_via:08x} {dep:>20} {name}");
|
||||||
imports.push((thunk, orig, import));
|
imports.push((thunk, orig, import));
|
||||||
|
total += 1;
|
||||||
//if let Some(existing) = self.addr_to_import.get(&call_via) {
|
//if let Some(existing) = self.addr_to_import.get(&call_via) {
|
||||||
//panic!("addr space overlap at 0x{call_via:x}: {}::{} vs {}::{}",
|
//panic!("addr space overlap at 0x{call_via:x}: {}::{} vs {}::{}",
|
||||||
//existing.0,
|
//existing.0,
|
||||||
|
|
@ -150,7 +149,7 @@ impl Dll {
|
||||||
//self.addr_to_import.insert(call_via, (dep.to_string(), name));
|
//self.addr_to_import.insert(call_via, (dep.to_string(), name));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
Ok((0, 0))
|
Ok((0, total))
|
||||||
}
|
}
|
||||||
fn calls (
|
fn calls (
|
||||||
name: &Arc<str>,
|
name: &Arc<str>,
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue