Commit 627aeca2 authored by Eric Pouech's avatar Eric Pouech Committed by Alexandre Julliard

Created dump.c as a central point for file dumping (includes header

analysis, utility funcs...). Added support for dumping minidump files.
parent 642402d5
...@@ -10,16 +10,18 @@ MODULE = none ...@@ -10,16 +10,18 @@ MODULE = none
C_SRCS = \ C_SRCS = \
debug.c \ debug.c \
dump.c \
emf.c \ emf.c \
le.c \ le.c \
lnk.c \ lnk.c \
main.c \ main.c \
misc.c \ minidump.c \
msmangle.c \ misc.c \
msmangle.c \
ne.c \ ne.c \
output.c \ output.c \
pe.c \ pe.c \
search.c \ search.c \
symbol.c symbol.c
all: $(PROGRAMS) all: $(PROGRAMS)
......
...@@ -99,8 +99,6 @@ ...@@ -99,8 +99,6 @@
* (OMFDirHeader.cDir) * (OMFDirHeader.cDir)
*/ */
extern void *PE_base;
extern IMAGE_NT_HEADERS* PE_nt_headers; extern IMAGE_NT_HEADERS* PE_nt_headers;
static void* cv_base /* = 0 */; static void* cv_base /* = 0 */;
...@@ -509,14 +507,14 @@ static const char* get_coff_name( PIMAGE_SYMBOL coff_sym, const char* coff_str ...@@ -509,14 +507,14 @@ static const char* get_coff_name( PIMAGE_SYMBOL coff_sym, const char* coff_str
return nampnt; return nampnt;
} }
void dump_coff(unsigned long coffbase, unsigned long len) void dump_coff(unsigned long coffbase, unsigned long len, void* pmt)
{ {
PIMAGE_COFF_SYMBOLS_HEADER coff; PIMAGE_COFF_SYMBOLS_HEADER coff;
PIMAGE_SYMBOL coff_sym; PIMAGE_SYMBOL coff_sym;
PIMAGE_SYMBOL coff_symbols; PIMAGE_SYMBOL coff_symbols;
PIMAGE_LINENUMBER coff_linetab; PIMAGE_LINENUMBER coff_linetab;
char * coff_strtab; char * coff_strtab;
IMAGE_SECTION_HEADER *sectHead = (IMAGE_SECTION_HEADER*)((char*)PE_nt_headers + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + PE_nt_headers->FileHeader.SizeOfOptionalHeader); IMAGE_SECTION_HEADER * sectHead = pmt;
unsigned int i; unsigned int i;
const char * nampnt; const char * nampnt;
int naux; int naux;
...@@ -527,9 +525,9 @@ void dump_coff(unsigned long coffbase, unsigned long len) ...@@ -527,9 +525,9 @@ void dump_coff(unsigned long coffbase, unsigned long len)
coff_linetab = (PIMAGE_LINENUMBER) ((unsigned int) coff + coff->LvaToFirstLinenumber); coff_linetab = (PIMAGE_LINENUMBER) ((unsigned int) coff + coff->LvaToFirstLinenumber);
coff_strtab = (char *) (coff_symbols + coff->NumberOfSymbols); coff_strtab = (char *) (coff_symbols + coff->NumberOfSymbols);
printf("\nDebug table: COFF format. modbase %p, coffbase %p\n", PE_base, coff); printf("\nDebug table: COFF format. modbase %p, coffbase %p\n", PRD(0, 0), coff);
printf(" ID | seg:offs [ abs ] | symbol/function name\n"); printf(" ID | seg:offs [ abs ] | symbol/function name\n");
for(i=0; i < coff->NumberOfSymbols; i++ ) for(i=0; i < coff->NumberOfSymbols; i++ )
{ {
coff_sym = coff_symbols + i; coff_sym = coff_symbols + i;
naux = coff_sym->NumberOfAuxSymbols; naux = coff_sym->NumberOfAuxSymbols;
......
/*
* File dumping utility
*
* Copyright 2001,2005 Eric Pouech
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#include "config.h"
#include "wine/port.h"
#include <stdlib.h>
#include <stdarg.h>
#include <stdio.h>
#ifdef HAVE_UNISTD_H
# include <unistd.h>
#endif
#include <time.h>
#ifdef HAVE_SYS_TYPES_H
# include <sys/types.h>
#endif
#ifdef HAVE_SYS_STAT_H
# include <sys/stat.h>
#endif
#ifdef HAVE_SYS_MMAN_H
#include <sys/mman.h>
#endif
#include <fcntl.h>
#define NONAMELESSUNION
#define NONAMELESSSTRUCT
#include "windef.h"
#include "winbase.h"
#include "winedump.h"
#include "pe.h"
#ifndef O_BINARY
# define O_BINARY 0
#endif
static void* dump_base;
static unsigned long dump_total_len;
void dump_data( const unsigned char *ptr, unsigned int size, const char *prefix )
{
unsigned int i, j;
printf( "%s", prefix );
if (!ptr)
{
printf("NULL\n");
return;
}
for (i = 0; i < size; i++)
{
printf( "%02x%c", ptr[i], (i % 16 == 7) ? '-' : ' ' );
if ((i % 16) == 15)
{
printf( " " );
for (j = 0; j < 16; j++)
printf( "%c", isprint(ptr[i-15+j]) ? ptr[i-15+j] : '.' );
if (i < size-1) printf( "\n%s", prefix );
}
}
if (i % 16)
{
printf( "%*s ", 3 * (16-(i%16)), "" );
for (j = 0; j < i % 16; j++)
printf( "%c", isprint(ptr[i-(i%16)+j]) ? ptr[i-(i%16)+j] : '.' );
}
printf( "\n" );
}
const char* get_time_str(DWORD _t)
{
time_t t = (time_t)_t;
static char buf[128];
/* FIXME: I don't get the same values from MS' pedump running under Wine...
* I wonder if Wine isn't broken wrt to GMT settings...
*/
strncpy(buf, ctime(&t), sizeof(buf));
buf[sizeof(buf) - 1] = '\0';
if (buf[strlen(buf)-1] == '\n')
buf[strlen(buf)-1] = '\0';
return buf;
}
unsigned int strlenW( const WCHAR *str )
{
const WCHAR *s = str;
while (*s) s++;
return s - str;
}
void dump_unicode_str( const WCHAR *str, int len )
{
if (len == -1) len = strlenW( str );
printf( "L\"");
while (len-- > 0 && *str)
{
WCHAR c = *str++;
switch (c)
{
case '\n': printf( "\\n" ); break;
case '\r': printf( "\\r" ); break;
case '\t': printf( "\\t" ); break;
case '"': printf( "\\\"" ); break;
case '\\': printf( "\\\\" ); break;
default:
if (c >= ' ' && c <= 126) putchar(c);
else printf( "\\u%04x",c);
}
}
printf( "\"" );
}
void* PRD(unsigned long prd, unsigned long len)
{
return (prd + len > dump_total_len) ? NULL : (char*)dump_base + prd;
}
unsigned long Offset(void* ptr)
{
if (ptr < dump_base) {printf("<<<<<ptr below\n");return 0;}
if ((char *)ptr >= (char*)dump_base + dump_total_len) {printf("<<<<<ptr above\n");return 0;}
return (char*)ptr - (char*)dump_base;
}
static void do_dump( enum FileSig sig, void* pmt )
{
if (sig == SIG_NE)
{
ne_dump( dump_base, dump_total_len );
return;
}
if (sig == SIG_LE)
{
le_dump( dump_base, dump_total_len );
return;
}
pe_dump(pmt);
}
static enum FileSig check_headers(void** pmt)
{
WORD* pw;
DWORD* pdw;
IMAGE_DOS_HEADER* dh;
enum FileSig sig;
pw = PRD(0, sizeof(WORD));
if (!pw) {printf("Can't get main signature, aborting\n"); return 0;}
*pmt = NULL;
switch (*pw)
{
case IMAGE_DOS_SIGNATURE:
sig = SIG_DOS;
dh = PRD(0, sizeof(IMAGE_DOS_HEADER));
if (dh && dh->e_lfanew >= sizeof(*dh)) /* reasonable DOS header ? */
{
/* the signature is the first DWORD */
pdw = PRD(dh->e_lfanew, sizeof(DWORD));
if (pdw)
{
if (*pdw == IMAGE_NT_SIGNATURE)
{
*pmt = PRD(dh->e_lfanew, sizeof(DWORD)+sizeof(IMAGE_FILE_HEADER));
sig = SIG_PE;
}
else if (*(WORD *)pdw == IMAGE_OS2_SIGNATURE)
{
sig = SIG_NE;
}
else if (*(WORD *)pdw == IMAGE_VXD_SIGNATURE)
{
sig = SIG_LE;
}
else
{
printf("No PE Signature found\n");
}
}
else
{
printf("Can't get the extented signature, aborting\n");
}
}
break;
case 0x4944: /* "DI" */
sig = SIG_DBG;
break;
case 0x444D: /* "MD" */
pdw = PRD(0, sizeof(DWORD));
if (pdw && *pdw == 0x504D444D) /* "MDMP" */
sig = SIG_MDMP;
else
sig = SIG_UNKNOWN;
break;
default:
printf("No known main signature (%.2s/%x), aborting\n", (char*)pw, *pw);
sig = SIG_UNKNOWN;
}
return sig;
}
int dump_analysis(const char* name, void (*fn)(enum FileSig, void*), enum FileSig wanted_sig)
{
int fd;
enum FileSig effective_sig;
int ret = 1;
struct stat s;
void* pmt;
setbuf(stdout, NULL);
fd = open(name, O_RDONLY | O_BINARY);
if (fd == -1) fatal("Can't open file");
if (fstat(fd, &s) < 0) fatal("Can't get size");
dump_total_len = s.st_size;
#ifdef HAVE_MMAP
if ((dump_base = mmap(NULL, dump_total_len, PROT_READ, MAP_PRIVATE, fd, 0)) == (void *)-1)
#endif
{
if (!(dump_base = malloc( dump_total_len ))) fatal( "Out of memory" );
if ((unsigned long)read( fd, dump_base, dump_total_len ) != dump_total_len) fatal( "Cannot read file" );
}
effective_sig = check_headers(&pmt);
if (effective_sig == SIG_UNKNOWN)
{
printf("Can't get a recognized file signature, aborting\n");
ret = 0;
}
else if (wanted_sig == SIG_UNKNOWN || wanted_sig == effective_sig)
{
switch (effective_sig)
{
case SIG_UNKNOWN: /* shouldn't happen... */
ret = 0; break;
case SIG_PE:
case SIG_NE:
case SIG_LE:
printf("Contents of \"%s\": %ld bytes\n\n", name, dump_total_len);
(*fn)(effective_sig, pmt);
break;
case SIG_DBG:
dump_separate_dbg();
break;
case SIG_DOS:
ret = 0; break;
case SIG_MDMP:
mdmp_dump();
break;
}
}
else
{
printf("Can't get a suitable file signature, aborting\n");
ret = 0;
}
if (ret) printf("Done dumping %s\n", name);
#ifdef HAVE_MMAP
if (munmap(dump_base, dump_total_len) == -1)
#endif
{
free( dump_base );
}
close(fd);
return ret;
}
void dump_file(const char* name)
{
dump_analysis(name, do_dump, SIG_UNKNOWN);
}
...@@ -46,37 +46,7 @@ ...@@ -46,37 +46,7 @@
#include "winedump.h" #include "winedump.h"
#include "pe.h" #include "pe.h"
#ifndef O_BINARY static IMAGE_NT_HEADERS* PE_nt_headers;
# define O_BINARY 0
#endif
void* PE_base;
unsigned long PE_total_len;
IMAGE_NT_HEADERS* PE_nt_headers;
enum FileSig {SIG_UNKNOWN, SIG_DOS, SIG_PE, SIG_DBG, SIG_NE, SIG_LE};
static inline unsigned int strlenW( const WCHAR *str )
{
const WCHAR *s = str;
while (*s) s++;
return s - str;
}
char* get_time_str(DWORD _t)
{
time_t t = (time_t)_t;
static char buf[128];
/* FIXME: I don't get the same values from MS' pedump running under Wine...
* I wonder if Wine isn't broken wrt to GMT settings...
*/
strncpy(buf, ctime(&t), sizeof(buf));
buf[sizeof(buf) - 1] = '\0';
if (buf[strlen(buf)-1] == '\n')
buf[strlen(buf)-1] = '\0';
return buf;
}
static const char* get_machine_str(DWORD mach) static const char* get_machine_str(DWORD mach)
{ {
...@@ -94,18 +64,6 @@ static const char* get_machine_str(DWORD mach) ...@@ -94,18 +64,6 @@ static const char* get_machine_str(DWORD mach)
return "???"; return "???";
} }
void* PRD(unsigned long prd, unsigned long len)
{
return (prd + len > PE_total_len) ? NULL : (char*)PE_base + prd;
}
unsigned long Offset(void* ptr)
{
if (ptr < PE_base) {printf("<<<<<ptr below\n");return 0;}
if ((char *)ptr >= (char*)PE_base + PE_total_len) {printf("<<<<<ptr above\n");return 0;}
return (char*)ptr - (char*)PE_base;
}
static void* RVA(unsigned long rva, unsigned long len) static void* RVA(unsigned long rva, unsigned long len)
{ {
IMAGE_SECTION_HEADER* sectHead; IMAGE_SECTION_HEADER* sectHead;
...@@ -515,7 +473,8 @@ static void dump_dir_debug_dir(IMAGE_DEBUG_DIRECTORY* idd, int idx) ...@@ -515,7 +473,8 @@ static void dump_dir_debug_dir(IMAGE_DEBUG_DIRECTORY* idd, int idx)
case IMAGE_DEBUG_TYPE_UNKNOWN: case IMAGE_DEBUG_TYPE_UNKNOWN:
break; break;
case IMAGE_DEBUG_TYPE_COFF: case IMAGE_DEBUG_TYPE_COFF:
dump_coff(idd->PointerToRawData, idd->SizeOfData); dump_coff(idd->PointerToRawData, idd->SizeOfData,
(char*)PE_nt_headers + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + PE_nt_headers->FileHeader.SizeOfOptionalHeader);
break; break;
case IMAGE_DEBUG_TYPE_CODEVIEW: case IMAGE_DEBUG_TYPE_CODEVIEW:
dump_codeview(idd->PointerToRawData, idd->SizeOfData); dump_codeview(idd->PointerToRawData, idd->SizeOfData);
...@@ -597,7 +556,7 @@ static void dump_dir_tls(void) ...@@ -597,7 +556,7 @@ static void dump_dir_tls(void)
printf(" }\n\n"); printf(" }\n\n");
} }
static void dump_separate_dbg(void) void dump_separate_dbg(void)
{ {
IMAGE_SEPARATE_DEBUG_HEADER*separateDebugHead = PRD(0, sizeof(separateDebugHead)); IMAGE_SEPARATE_DEBUG_HEADER*separateDebugHead = PRD(0, sizeof(separateDebugHead));
unsigned nb_dbg; unsigned nb_dbg;
...@@ -643,28 +602,6 @@ static void dump_separate_dbg(void) ...@@ -643,28 +602,6 @@ static void dump_separate_dbg(void)
} }
} }
static void dump_unicode_str( const WCHAR *str, int len )
{
if (len == -1) for (len = 0; str[len]; len++) ;
printf( "L\"");
while (len-- > 0 && *str)
{
WCHAR c = *str++;
switch (c)
{
case '\n': printf( "\\n" ); break;
case '\r': printf( "\\r" ); break;
case '\t': printf( "\\t" ); break;
case '"': printf( "\\\"" ); break;
case '\\': printf( "\\\\" ); break;
default:
if (c >= ' ' && c <= 126) putchar(c);
else printf( "\\u%04x",c);
}
}
printf( "\"" );
}
static const char *get_resource_type( unsigned int id ) static const char *get_resource_type( unsigned int id )
{ {
static const char *types[] = static const char *types[] =
...@@ -699,36 +636,6 @@ static const char *get_resource_type( unsigned int id ) ...@@ -699,36 +636,6 @@ static const char *get_resource_type( unsigned int id )
return NULL; return NULL;
} }
void dump_data( const unsigned char *ptr, unsigned int size, const char *prefix )
{
unsigned int i, j;
printf( "%s", prefix );
if (!ptr)
{
printf("NULL\n");
return;
}
for (i = 0; i < size; i++)
{
printf( "%02x%c", ptr[i], (i % 16 == 7) ? '-' : ' ' );
if ((i % 16) == 15)
{
printf( " " );
for (j = 0; j < 16; j++)
printf( "%c", isprint(ptr[i-15+j]) ? ptr[i-15+j] : '.' );
if (i < size-1) printf( "\n%s", prefix );
}
}
if (i % 16)
{
printf( "%*s ", 3 * (16-(i%16)), "" );
for (j = 0; j < i % 16; j++)
printf( "%c", isprint(ptr[i-(i%16)+j]) ? ptr[i-(i%16)+j] : '.' );
}
printf( "\n" );
}
/* dump an ASCII string with proper escaping */ /* dump an ASCII string with proper escaping */
static int dump_strA( const unsigned char *str, size_t len ) static int dump_strA( const unsigned char *str, size_t len )
{ {
...@@ -944,22 +851,11 @@ static void dump_dir_resource(void) ...@@ -944,22 +851,11 @@ static void dump_dir_resource(void)
printf( "\n\n" ); printf( "\n\n" );
} }
static void do_dump( enum FileSig sig ) void pe_dump(void* pmt)
{ {
int all = (globals.dumpsect != NULL) && strcmp(globals.dumpsect, "ALL") == 0; int all = (globals.dumpsect != NULL) && strcmp(globals.dumpsect, "ALL") == 0;
if (sig == SIG_NE) PE_nt_headers = pmt;
{
ne_dump( PE_base, PE_total_len );
return;
}
if (sig == SIG_LE)
{
le_dump( PE_base, PE_total_len );
return;
}
if (globals.do_dumpheader) if (globals.do_dumpheader)
{ {
dump_pe_header(); dump_pe_header();
...@@ -994,142 +890,6 @@ static void do_dump( enum FileSig sig ) ...@@ -994,142 +890,6 @@ static void do_dump( enum FileSig sig )
} }
} }
static enum FileSig check_headers(void)
{
WORD* pw;
DWORD* pdw;
IMAGE_DOS_HEADER* dh;
enum FileSig sig;
pw = PRD(0, sizeof(WORD));
if (!pw) {printf("Can't get main signature, aborting\n"); return 0;}
switch (*pw)
{
case IMAGE_DOS_SIGNATURE:
sig = SIG_DOS;
dh = PRD(0, sizeof(IMAGE_DOS_HEADER));
if (dh && dh->e_lfanew >= sizeof(*dh)) /* reasonable DOS header ? */
{
/* the signature is the first DWORD */
pdw = PRD(dh->e_lfanew, sizeof(DWORD));
if (pdw)
{
if (*pdw == IMAGE_NT_SIGNATURE)
{
PE_nt_headers = PRD(dh->e_lfanew, sizeof(DWORD)+sizeof(IMAGE_FILE_HEADER));
sig = SIG_PE;
}
else if (*(WORD *)pdw == IMAGE_OS2_SIGNATURE)
{
sig = SIG_NE;
}
else if (*(WORD *)pdw == IMAGE_VXD_SIGNATURE)
{
sig = SIG_LE;
}
else
{
printf("No PE Signature found\n");
}
}
else
{
printf("Can't get the extented signature, aborting\n");
}
}
break;
case 0x4944: /* "DI" */
sig = SIG_DBG;
break;
default:
printf("No known main signature (%.2s/%x), aborting\n", (char*)pw, *pw);
sig = SIG_UNKNOWN;
}
return sig;
}
static int pe_analysis(const char* name, void (*fn)(enum FileSig), enum FileSig wanted_sig)
{
int fd;
enum FileSig effective_sig;
int ret = 1;
struct stat s;
setbuf(stdout, NULL);
fd = open(name, O_RDONLY | O_BINARY);
if (fd == -1) fatal("Can't open file");
if (fstat(fd, &s) < 0) fatal("Can't get size");
PE_total_len = s.st_size;
#ifdef HAVE_MMAP
if ((PE_base = mmap(NULL, PE_total_len, PROT_READ, MAP_PRIVATE, fd, 0)) == (void *)-1)
#endif
{
if (!(PE_base = malloc( PE_total_len ))) fatal( "Out of memory" );
if ((unsigned long)read( fd, PE_base, PE_total_len ) != PE_total_len) fatal( "Cannot read file" );
}
effective_sig = check_headers();
if (effective_sig == SIG_UNKNOWN)
{
printf("Can't get a recognized file signature, aborting\n");
ret = 0;
}
else if (wanted_sig == SIG_UNKNOWN || wanted_sig == effective_sig)
{
switch (effective_sig)
{
case SIG_UNKNOWN: /* shouldn't happen... */
ret = 0; break;
case SIG_PE:
case SIG_NE:
case SIG_LE:
printf("Contents of \"%s\": %ld bytes\n\n", name, PE_total_len);
(*fn)(effective_sig);
break;
case SIG_DBG:
dump_separate_dbg();
break;
case SIG_DOS:
ret = 0; break;
}
}
else
{
printf("Can't get a suitable file signature, aborting\n");
ret = 0;
}
if (ret) printf("Done dumping %s\n", name);
#ifdef HAVE_MMAP
if (munmap(PE_base, PE_total_len) == -1)
#endif
{
free( PE_base );
}
close(fd);
return ret;
}
void dump_file(const char* name)
{
pe_analysis(name, do_dump, SIG_UNKNOWN);
}
#if 0
int main(int argc, char* argv[])
{
if (argc != 2) fatal("usage");
pe_analysis(argv[1], do_dump);
}
#endif
typedef struct _dll_symbol { typedef struct _dll_symbol {
size_t ordinal; size_t ordinal;
char *symbol; char *symbol;
...@@ -1164,9 +924,9 @@ static void dll_close (void) ...@@ -1164,9 +924,9 @@ static void dll_close (void)
} }
*/ */
static void do_grab_sym( enum FileSig sig ) static void do_grab_sym( enum FileSig sig, void* pmt )
{ {
IMAGE_EXPORT_DIRECTORY *exportDir = get_dir(IMAGE_FILE_EXPORT_DIRECTORY); IMAGE_EXPORT_DIRECTORY *exportDir;
unsigned i, j; unsigned i, j;
DWORD* pName; DWORD* pName;
DWORD* pFunc; DWORD* pFunc;
...@@ -1174,7 +934,8 @@ static void do_grab_sym( enum FileSig sig ) ...@@ -1174,7 +934,8 @@ static void do_grab_sym( enum FileSig sig )
char* ptr; char* ptr;
DWORD* map; DWORD* map;
if (!exportDir) return; PE_nt_headers = pmt;
if (!(exportDir = get_dir(IMAGE_FILE_EXPORT_DIRECTORY))) return;
pName = RVA(exportDir->AddressOfNames, exportDir->NumberOfNames * sizeof(DWORD)); pName = RVA(exportDir->AddressOfNames, exportDir->NumberOfNames * sizeof(DWORD));
if (!pName) {printf("Can't grab functions' name table\n"); return;} if (!pName) {printf("Can't grab functions' name table\n"); return;}
...@@ -1242,7 +1003,7 @@ static void do_grab_sym( enum FileSig sig ) ...@@ -1242,7 +1003,7 @@ static void do_grab_sym( enum FileSig sig )
*/ */
int dll_open (const char *dll_name) int dll_open (const char *dll_name)
{ {
return pe_analysis(dll_name, do_grab_sym, SIG_PE); return dump_analysis(dll_name, do_grab_sym, SIG_PE);
} }
/******************************************************************* /*******************************************************************
......
...@@ -19,8 +19,7 @@ ...@@ -19,8 +19,7 @@
*/ */
extern void dump_codeview(unsigned long ptr, unsigned long len); extern void dump_codeview(unsigned long ptr, unsigned long len);
extern void dump_coff(unsigned long coffbase, unsigned long len); extern void dump_coff(unsigned long coffbase, unsigned long len, void* sect_map);
extern void dump_frame_pointer_omission(unsigned long base, unsigned long len); extern void dump_frame_pointer_omission(unsigned long base, unsigned long len);
extern void* PRD(unsigned long prd, unsigned long len); extern void dump_separate_dbg(void);
extern unsigned long Offset(void* ptr); extern void pe_dump(void*);
extern char* get_time_str(DWORD _t);
...@@ -89,6 +89,8 @@ typedef struct __parsed_symbol ...@@ -89,6 +89,8 @@ typedef struct __parsed_symbol
char arg_flag [MAX_FUNCTION_ARGS]; char arg_flag [MAX_FUNCTION_ARGS];
char *arg_text [MAX_FUNCTION_ARGS]; char *arg_text [MAX_FUNCTION_ARGS];
char *arg_name [MAX_FUNCTION_ARGS]; char *arg_name [MAX_FUNCTION_ARGS];
unsigned int n_u_refs;
char *u_ref [MAX_FUNCTION_ARGS];
} parsed_symbol; } parsed_symbol;
/* FIXME: Replace with some hash such as GHashTable */ /* FIXME: Replace with some hash such as GHashTable */
...@@ -220,11 +222,23 @@ const char *str_find_set (const char *str, const char *findset); ...@@ -220,11 +222,23 @@ const char *str_find_set (const char *str, const char *findset);
char *str_toupper (char *str); char *str_toupper (char *str);
void dump_data( const unsigned char *ptr, unsigned int size, const char *prefix ); /* file dumping functions */
enum FileSig {SIG_UNKNOWN, SIG_DOS, SIG_PE, SIG_DBG, SIG_NE, SIG_LE, SIG_MDMP};
void ne_dump( const void *exe, size_t exe_size ); void* PRD(unsigned long prd, unsigned long len);
unsigned long Offset(void* ptr);
void le_dump( const void *exe, size_t exe_size ); typedef void (*file_dumper)(enum FileSig, void*);
int dump_analysis(const char*, file_dumper, enum FileSig);
void dump_data( const unsigned char *ptr, unsigned int size, const char *prefix );
const char* get_time_str( unsigned long );
unsigned int strlenW( const unsigned short *str );
void dump_unicode_str( const unsigned short *str, int len );
void ne_dump( const void *exe, size_t exe_size );
void le_dump( const void *exe, size_t exe_size );
void mdmp_dump( void );
FILE *open_file (const char *name, const char *ext, const char *mode); FILE *open_file (const char *name, const char *ext, const char *mode);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment