loader/pe_image.c

   1 /*
   2  *  Copyright   1994    Eric Youndale & Erik Bos
   3  *
   4  *      based on Eric Youndale's pe-test and:
   5  *
   6  *      ftp.microsoft.com:/pub/developer/MSDN/CD8/PEFILE.ZIP
   7  */
   8
   9 #include <stdio.h>
  10 #include <stdlib.h>
  11 #include <string.h>
  12 #include <unistd.h>
  13 #include <sys/types.h>
  14 #include <sys/mman.h>
  15 #include "windows.h"
  16 #include "dlls.h"
  17 #include "neexe.h"
  18 #include "peexe.h"
  19
  20 #define MAP_ANONYMOUS   0x20
  21
  22 unsigned int load_addr;
  23
  24 void my_wcstombs(char * result, u_short * source, int len)
  25 {
  26   while(len--) {
  27     if(isascii(*source)) *result++ = *source++;
  28     else {
  29       printf("Unable to handle unicode right now\n");
  30       exit(0);
  31     }
  32   };
  33 }
  34
  35 char * xmmap(char * vaddr, unsigned int v_size, int prot, int flags,
  36              int fd, unsigned int file_offset)
  37 {
  38   char * result;
  39   result = mmap(vaddr, v_size, prot, flags, fd, file_offset);
  40   if((unsigned int) result != 0xffffffff) return result;
  41
  42   /* Sigh.  Alignment must be wrong for mmap.  Do this the hard way. */
  43   if(!(flags & MAP_FIXED)) {
  44     vaddr = 0x40000000;
  45     flags |= MAP_FIXED;
  46   };
  47
  48   mmap(vaddr, v_size, prot, MAP_ANONYMOUS | flags, 0, 0);
  49   lseek(fd, file_offset, SEEK_SET);
  50   read(fd, vaddr, v_size);
  51   return vaddr;
  52 };
  53
  54 dump_exports(struct PE_Export_Directory * pe_exports)
  55 {
  56   char * Module;
  57   int i;
  58   u_short * ordinal;
  59   u_long * function;
  60   u_char ** name, *ename;
  61
  62   Module = ((char *) load_addr) + pe_exports->Name;
  63   printf("\n*******EXPORT DATA*******\nModule name is %s, %d functions, %d names\n",
  64          Module,
  65          pe_exports->Number_Of_Functions,
  66          pe_exports->Number_Of_Names);
  67
  68   ordinal = (u_short *) (((char *) load_addr) + (int) pe_exports->Address_Of_Name_Ordinals);
  69   function = (u_long *)  (((char *) load_addr) + (int) pe_exports->AddressOfFunctions);
  70   name = (u_char **)  (((char *) load_addr) + (int) pe_exports->AddressOfNames);
  71
  72   printf("%-32s Ordinal Virt Addr\n", "Function Name");
  73   for(i=0; i< pe_exports->Number_Of_Functions; i++)
  74     {
  75       ename =  (char *) (((char *) load_addr) + (int) *name++);
  76       printf("%-32s %4d    %8.8x\n", ename, *ordinal++, *function++);
  77     }
  78
  79   return;
  80 }
  81
  82 dump_imports(struct PE_Import_Directory *pe_imports)
  83 {
  84   struct PE_Import_Directory * pe_imp;
  85
  86  /* OK, now dump the import list */
  87   printf("\nDumping imports list\n");
  88   pe_imp = pe_imports;
  89   while (pe_imp->ModuleName)
  90     {
  91       char * Module, *Function;
  92       struct pe_import_name * pe_name;
  93       unsigned int * import_list;
  94       char * c;
  95
  96       Module = ((char *) load_addr) + pe_imp->ModuleName;
  97       printf("%s\n", Module);
  98       c = strchr(Module, '.');
  99       if (c) *c = 0;
 100
 101       import_list = (unsigned int *)
 102         (((unsigned int) load_addr) + pe_imp->Import_List);
 103
 104       while(*import_list)
 105         {
 106           pe_name = (struct pe_import_name *) ((int) load_addr + *import_list);
 107           printf("--- %s %s.%d\n", pe_name->Name, Module, pe_name->Hint);
 108           import_list++;
 109         }
 110       pe_imp++;
 111     };
 112 }
 113
 114 static void dump_table(struct w_files *wpnt)
 115 {
 116   int i;
 117
 118   printf("Dump of segment table\n");
 119   printf("   Name    VSz  Vaddr     SzRaw   Fileadr  *Reloc *Lineum #Reloc #Linum Char\n");
 120   for(i=0; i< wpnt->pe->pe_header->coff.NumberOfSections; i++)
 121     {
 122       printf("%8s: %4.4x %8.8x %8.8x %8.8x %8.8x %8.8x %4.4x %4.4x %8.8x\n",
 123              wpnt->pe->pe_seg[i].Name,
 124              wpnt->pe->pe_seg[i].Virtual_Size,
 125              wpnt->pe->pe_seg[i].Virtual_Address,
 126              wpnt->pe->pe_seg[i].Size_Of_Raw_Data,
 127              wpnt->pe->pe_seg[i].PointerToRawData,
 128              wpnt->pe->pe_seg[i].PointerToRelocations,
 129              wpnt->pe->pe_seg[i].PointerToLinenumbers,
 130              wpnt->pe->pe_seg[i].NumberOfRelocations,
 131              wpnt->pe->pe_seg[i].NumberOfLinenumbers,
 132              wpnt->pe->pe_seg[i].Characteristics);
 133     }
 134 }
 135
 136 /**********************************************************************
 137  *                      LoadPEImage
 138  * Load one PE format executable into memory
 139  */
 140 HINSTANCE LoadPEImage(struct w_files *wpnt)
 141 {
 142         int i, result;
 143
 144         wpnt->pe = malloc(sizeof(struct pe_data));
 145         wpnt->pe->pe_header = malloc(sizeof(struct pe_header_s));
 146
 147         /* read PE header */
 148         lseek(wpnt->fd, wpnt->mz_header->ne_offset, SEEK_SET);
 149         read(wpnt->fd, wpnt->pe->pe_header, sizeof(struct pe_header_s));
 150
 151         /* read sections */
 152         wpnt->pe->pe_seg = malloc(sizeof(struct pe_segment_table) *
 153                                 wpnt->pe->pe_header->coff.NumberOfSections);
 154         read(wpnt->fd, wpnt->pe->pe_seg, sizeof(struct pe_segment_table) *
 155                         wpnt->pe->pe_header->coff.NumberOfSections);
 156
 157         load_addr = wpnt->pe->pe_header->opt_coff.BaseOfImage;
 158         dump_table(wpnt);
 159
 160         for(i=0; i < wpnt->pe->pe_header->coff.NumberOfSections; i++)
 161         {
 162         if(!load_addr) {
 163                 result = xmmap(0, wpnt->pe->pe_seg[i].Size_Of_Raw_Data, 7, MAP_PRIVATE,
 164                       wpnt->fd, wpnt->pe->pe_seg[i].PointerToRawData);
 165                 load_addr = (unsigned int) result -  wpnt->pe->pe_seg[i].Virtual_Address;
 166         } else {
 167                 result = xmmap((char *) load_addr + wpnt->pe->pe_seg[i].Virtual_Address,
 168                       wpnt->pe->pe_seg[i].Size_Of_Raw_Data, 7, MAP_PRIVATE | MAP_FIXED,
 169                       wpnt->fd, wpnt->pe->pe_seg[i].PointerToRawData);
 170         }
 171
 172         if(strcmp(wpnt->pe->pe_seg[i].Name, ".idata") == 0)
 173                 wpnt->pe->pe_import = (struct PE_Import_Directory *) result;
 174
 175         if(strcmp(wpnt->pe->pe_seg[i].Name, ".edata") == 0)
 176                 wpnt->pe->pe_export = (struct PE_Export_Directory *) result;
 177
 178         if(strcmp(wpnt->pe->pe_seg[i].Name, ".rsrc") == 0) {
 179             wpnt->pe->pe_resource = (struct PE_Resource_Directory *) result;
 180
 181             /* save offset for PE_FindResource */
 182             wpnt->pe->resource_offset = wpnt->pe->pe_seg[i].Virtual_Address -
 183                                         wpnt->pe->pe_seg[i].PointerToRawData;
 184             }
 185         }
 186
 187         if(wpnt->pe->pe_import) dump_imports(wpnt->pe->pe_import);
 188         if(wpnt->pe->pe_export) dump_exports(wpnt->pe->pe_export);
 189
 190         wpnt->hinstance = 0x8000;
 191         return (wpnt->hinstance);
 192 }
 193
 194 int PEunloadImage(struct w_files *wpnt)
 195 {
 196         printf("PEunloadImage() called!\n");
 197         /* free resources, image, unmap */
 198         return 1;
 199 }
 200
 201 int StartPEprogram(struct w_files *wpnt)
 202 {
 203         printf("StartPEprogram() called!\n");
 204         return 0;
 205 }
 206
 207 void InitPEDLL(struct w_files *wpnt)
 208 {
 209         /* Is this a library? */
 210         if (wpnt->pe->pe_header->coff.Characteristics & IMAGE_FILE_DLL) {
 211                 printf("InitPEDLL() called!\n");
 212         }
 213 }