/* Chrysalide - Outil d'analyse de fichiers binaires * post.c - traitements complémentaires à la phase de désassemblage * * Copyright (C) 2014 Cyrille Bagard * * This file is part of Chrysalide. * * OpenIDA is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * OpenIDA is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Foobar. If not, see . */ #include "post.h" #include "../../target.h" /****************************************************************************** * * * Paramètres : instr = instruction ARMv7 à traiter. * * format = acès aux données du binaire d'origine. * * * * Description : Complète un désassemblage accompli pour une instruction. * * * * Retour : - * * * * Remarques : - * * * ******************************************************************************/ void post_process_thumb_instruction_bl(GArchInstruction *instr, GBinFormat *format) { const mrange_t *range; virt_t pc; GArchOperand *op; vmpa_t val; GArchOperand *new; vmpa2t target; mrange_t trange; VMPA_BUFFER(loc); char name[5 + VMPA_MAX_LEN]; GBinRoutine *routine; /* Nouvelle routine trouvée */ GBinSymbol *symbol; /* Nouveau symbole construit */ range = g_arch_instruction_get_range(instr); pc = get_virt_addr(get_mrange_addr(range)) + 4 /* PC++ */; printf(" -- PC = 0x%x\n", (unsigned int)pc); op = g_arch_instruction_get_operand(instr, 0); g_imm_operand_to_vmpa_t(G_IMM_OPERAND(op), &val); printf(" -> %llx = %lld ==>> 0x%x\n", val, val, (unsigned int)(pc + val)); new = g_target_operand_new(MDS_32_BITS, pc + val); if (!g_target_operand_resolve(G_TARGET_OPERAND(new), format)) { init_vmpa(&target, VMPA_NO_PHYSICAL, pc + val); init_mrange(&trange, &target, 0); vmpa2_virt_to_string(&target, MDS_32_BITS, loc, NULL); snprintf(name, sizeof(name), "loc_%s", loc + 2); routine = g_binary_routine_new(); g_binary_routine_set_name(routine, strdup(name)); //routine = try_to_demangle_routine(name); g_binary_routine_set_range(routine, &trange); symbol = g_binary_symbol_new(STP_ROUTINE, NULL, ~0); g_binary_symbol_attach_routine(symbol, routine); g_binary_format_add_symbol(G_BIN_FORMAT(format), symbol); g_target_operand_resolve(G_TARGET_OPERAND(new), format); } g_arch_instruction_replace_operand(instr, new, op); //g_arch_instruction_attach_extra_operand(result, new); } /****************************************************************************** * * * Paramètres : instr = instruction ARMv7 à traiter. * * format = acès aux données du binaire d'origine. * * * * Description : Complète un désassemblage accompli pour une instruction. * * * * Retour : - * * * * Remarques : - * * * ******************************************************************************/ void post_process_thumb_instruction_blx(GArchInstruction *instr, GBinFormat *format) { const mrange_t *range; virt_t pc; GArchOperand *op; vmpa_t val; GArchOperand *new; vmpa2t target; mrange_t trange; VMPA_BUFFER(loc); char name[5 + VMPA_MAX_LEN]; GBinRoutine *routine; /* Nouvelle routine trouvée */ GBinSymbol *symbol; /* Nouveau symbole construit */ range = g_arch_instruction_get_range(instr); pc = get_virt_addr(get_mrange_addr(range)) + 4 /* PC++ */; printf(" -- PC = 0x%x -> 0x%x\n", (unsigned int)pc, (unsigned int)pc - pc % 4); pc = pc - pc % 4; op = g_arch_instruction_get_operand(instr, 0); g_imm_operand_to_vmpa_t(G_IMM_OPERAND(op), &val); printf(" -> %llx = %lld ==>> 0x%x\n", val, val, (unsigned int)(pc + val)); new = g_target_operand_new(MDS_32_BITS, pc + val); if (!g_target_operand_resolve(G_TARGET_OPERAND(new), format)) { init_vmpa(&target, VMPA_NO_PHYSICAL, pc + val); init_mrange(&trange, &target, 0); vmpa2_virt_to_string(&target, MDS_32_BITS, loc, NULL); snprintf(name, sizeof(name), "loc_%s", loc + 2); routine = g_binary_routine_new(); g_binary_routine_set_name(routine, strdup(name)); //routine = try_to_demangle_routine(name); g_binary_routine_set_range(routine, &trange); symbol = g_binary_symbol_new(STP_ROUTINE, NULL, ~0); g_binary_symbol_attach_routine(symbol, routine); g_binary_format_add_symbol(G_BIN_FORMAT(format), symbol); g_target_operand_resolve(G_TARGET_OPERAND(new), format); } g_arch_instruction_replace_operand(instr, new, op); //g_arch_instruction_attach_extra_operand(result, new); }